Remote Senior Staff Infrastructure Security Engineer

VulnU; Harvey (IL); Remote; USD 231,000 - 340,000; Full time

Benefits offered by this job

18 weeks parental leave

Flexible PTO

Learning budget

Job summary

Harvey is hiring a Staff Infrastructure Security Engineer to set the security direction for our cloud platform. You will establish patterns for least privilege, tenant isolation, and secure-by-default infrastructure across a multi-tenant SaaS offering.

You will mentor engineers, drive security initiatives across teams, and partner with product and engineering to implement scalable security controls and guardrails in IaC and CI/CD pipelines.

Qualifications

• 8+ years of experience in security engineering or software engineering.
• Strong fundamentals in networking, operating systems, and cryptographic protocols.
• Experience applying security best practices in cloud environments (AWS, Azure, or Google Cloud).
• Track record of driving cross-functional security initiatives and influencing engineering decisions.

Responsibilities

• Incorporate secure design principles into our cloud architecture.
• Establish reusable security patterns, standards, and guardrails for secure-by-default builds.
• Develop isolation mechanisms (e.g., sandboxing) with product engineering teams.
• Review security-critical configuration changes and act as Codeowner for security-critical cloud configurations (IaC).
• Partner with Engineering and Product teams to manage risks and vulnerabilities in the Cloud environment.
• Translate security requirements into concrete engineering investments and roadmaps.
• Mentor and develop other security engineers to raise the technical bar.

Skills

Security engineering

Kubernetes

Cloud security

Infrastructure as Code

Networking

Cryptography

Vulnerability management

Code ownership

Tools

Kubernetes Admission Controllers

IaC tooling (Terraform/CloudFormation)

Job description

Harvey is hiring a Staff Infrastructure Security Engineer to set the security direction for our cloud platform. You will establish patterns for least privilege, tenant isolation, and secure-by-default infrastructure across a multi-tenant SaaS offering.

You will mentor engineers, drive security initiatives across teams, and partner with product and engineering to implement scalable security controls and guardrails in IaC and CI/CD pipelines.