Senior Security & Cloud Infrastructure Engineer

Ali Aydi; Boston (MA); Hybrid; USD 137,000 - 193,000; Full time

Benefits offered by this job

Equity

Medical insurance

Unlimited PTO

401(k)

Job summary

CivilGrid is seeking a Security & Infrastructure Engineer to own security posture and support our cloud platform as we scale with large utilities and civil engineering firms.

You will lead the security program, collaborate across engineering, IT, and leadership, and contribute to reliability across the Systems team. The role is hybrid, based in Boston with in-office presence required.

Qualifications

• 5+ years of experience in product/platform security or security engineering
• Hands-on with DevOps/SRE of production AWS infrastructure
• Experience running SOC 2 program and audits
• Deep knowledge of AWS services and infrastructure-as-code
• Proven ability to improve reliability and security posture

Responsibilities

• Embed reliability and security into the SDLC and infrastructure decisions
• Run the security program: SOC 2 readiness, audits, vendor reviews, access controls and threat modeling
• Define and enforce policies for identity, secrets, data handling, and production access
• Lead incident response for security and reliability events from detection to resolution
• Harden and monitor GIS servers and AWS platform, contribute to Trust Center
• Contribute to AWS environment end-to-end: VPC, ECS, RDS, IAM, Secrets Manager, networking
• Improve reliability practices: SLOs, observability, on-call, runbooks, post-incident reviews

Skills

Security engineering

DevOps/SRE

AWS security

Incident response

Threat modeling

Vulnerability management

Communication

Tools

AWS

CDK

Terraform

GitHub

Datadog

Drata

Job description

CivilGrid is seeking a Security & Infrastructure Engineer to own security posture and support our cloud platform as we scale with large utilities and civil engineering firms.

You will lead the security program, collaborate across engineering, IT, and leadership, and contribute to reliability across the Systems team. The role is hybrid, based in Boston with in-office presence required.