Infrastructure Security Engineer — Scale Securely in Cloud

Aaru; New York (NY); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Competitive base salary

Equity participation

Comprehensive medical, vision, and/or–

Visa sponsorship and relocation

Relocation support

Job summary

Aaru in New York City seeks an infrastructure security engineer to own security across the company and scale safeguards as we grow. You will set priorities and implement controls spanning cloud, identity, automated agents, and software delivery.

This is an engineering role with broad ownership, collaborating with research, compliance, and engineering teams to embed secure practices into our workflows and product delivery.

Qualifications

• Proven experience securing production infrastructure.
• Strong fundamentals in networking, cloud services, containers, and distributed systems.
• Ability to assess unfamiliar systems, identify meaningful risks, and prioritize.
• Experience building internal tools or platforms used by engineers.
• Ability to explain security tradeoffs clearly and collaborate to resolve them.

Responsibilities

• Establish security roadmap and own execution, prioritizing risks as the company grows.
• Build security controls for autonomous and coding agents, including sandboxing and scoped access to tools, data, and networks.
• Own identity and access management across production systems and tools, including SCIM and RBAC.
• Secure cloud infrastructure and software supply chain, including CI/CD pipelines, dependencies, secrets, and artifacts.
• Operate and evolve endpoint security, device management and vulnerability findings.
• Build monitoring, detection, and incident response capabilities.
• Partner with engineers on threat modeling and architecture reviews.
• Work with compliance to ensure controls are effective, auditable and practical.

Skills

Security engineering

Cloud security

IAM

Autonomous agents security

DevSecOps

Supply chain security

Job description

Aaru in New York City seeks an infrastructure security engineer to own security across the company and scale safeguards as we grow. You will set priorities and implement controls spanning cloud, identity, automated agents, and software delivery.

This is an engineering role with broad ownership, collaborating with research, compliance, and engineering teams to embed secure practices into our workflows and product delivery.