Senior Infrastructure Security Engineer - Cloud & Automation

Quora; United States; On-site; USD 120,000 - 170,000; Full time

Job summary

Quora is seeking a Security Engineer to join the newly formed Security Engineering Team, protecting Quora and Poe from security problems by building robust protections across products, infrastructure, and people.

You will partner with engineering to review cloud architecture, establish threat models, and develop tools to monitor and harden environments, while driving security policy and automation across CI/CD pipelines.

Qualifications

• Hands-on experience securing large-scale cloud environments, especially AWS.
• Experience building secure IaC pipelines with Terraform or CloudFormation.
• Understand IAM, network segmentation, and VPC design, with strong monitoring/logging practices.
• Familiarity with Kubernetes security, serverless architectures, or related domains is a bonus.

Responsibilities

• Support Quora and Poe products with security engineering standards.
• Partner with engineering teams to review cloud and compute architecture designs.
• Establish threat models for cloud and compute roadmaps to identify risks.
• Develop or adopt open-source tools to monitor and harden cloud infrastructure and OS.
• Write automation to support threat detection, incident containment, and access management.
• Conduct initial incident triage and participate in incident response.

Skills

Software engineering

Cloud infrastructure security

Automation & secure development

Container security

Linux security

Tools

Terraform

CloudFormation

AWS IAM

Kubernetes security

Job description

Quora is seeking a Security Engineer to join the newly formed Security Engineering Team, protecting Quora and Poe from security problems by building robust protections across products, infrastructure, and people.

You will partner with engineering to review cloud architecture, establish threat models, and develop tools to monitor and harden environments, while driving security policy and automation across CI/CD pipelines.