Infrastructure Security Engineer — Offensive & Cloud Risk Lead

401 Cast & Crew LLC; United States; Remote; USD 150,000 - 170,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

PTO (Paid Time Off)

Wellness Programs

Employee Discounts

Job summary

Cast & Crew is seeking an Infrastructure Security Engineer to own offensive and vulnerability management tooling, including bug bounty, red team, and CSPM across cloud and on‑premises. This hands‑on role requires curiosity, rapid learning, and a track record of turning findings into fixes.

The position focuses on integrating emerging AI security tooling, validating exploits, and driving issues to closure with engineering teams. Global risk management experience is a plus.

Qualifications

• 3–5 years of infrastructure, network, or cloud security experience.
• Experience running an enterprise vulnerability management program end‑to‑end.
• Ability to triage security findings: reproduce issues, judge exploitability, de‑duplicate, and prioritize by business context.
• Hands‑on proficiency with security testing tooling: Burp Suite and Postman.
• Experience with one major cloud platform (AWS, Azure, or GCP).
• Strong written and verbal communication skills.

Responsibilities

• Oversee bug bounty program operations and triage submissions.
• Triage and prioritize vulnerability findings and track remediation.
• Manage CSPM across multi‑cloud environments and enforce least‑privilege access.
• Coordinate agentic red‑team testing and translate findings to remediation items.
• Evaluate and adopt new security tooling and automate triage and reporting.
• Support network security infrastructure, firewall reviews, and incident needs.

Skills

3–5 years security experience

Security findings triage

Communication skills

Curiosity & fast learning

Risk translation to non-technical

Python & shell scripting

Tools

Burp Suite

Postman

Terraform

CloudFormation

Kubernetes

ECS

Job description

Cast & Crew is seeking an Infrastructure Security Engineer to own offensive and vulnerability management tooling, including bug bounty, red team, and CSPM across cloud and on‑premises. This hands‑on role requires curiosity, rapid learning, and a track record of turning findings into fixes.

The position focuses on integrating emerging AI security tooling, validating exploits, and driving issues to closure with engineering teams. Global risk management experience is a plus.