Senior Security Engineer, Cloud and Infrastructure Security

ww; United States; On-site; USD 150,000 - 190,000; Full time

Job summary

WeightWatchers engineers are building the future of digital health security, protecting patient data and ensuring secure products across cloud platforms. This Senior Security Engineer role focuses on cloud security, AI-enabled defenses, and incident response, collaborating with cross-functional teams to strengthen defenses and enable safe AI tooling adoption.

You will work within the Engineering organization to design, implement, and automate secure infrastructure, maintaining defense-in-depth

Qualifications

• Experience with cloud security and incident response leadership.
• Hands-on IAM and secure configuration in AWS.
• Proven ability to reduce risk in large-scale infra.

Responsibilities

• Design and build security for the future of WW infrastructure.
• Collaborate with infrastructure, engineering, compliance, and security teams to improve cloud security posture.
• Lead AI-native security initiatives and tooling adoption across the enterprise.
• Develop AI agents to enhance threat detection, alert triage, vulnerability management and incident response.
• Replace manual runbooks with intelligent agents that can reason and take action.
• Maintain defense-in-depth through secure-by-default architectures and processes.
• Define and monitor KPIs for a healthy infra/cloudSec program.
• Detect and respond to security incidents and participate in on-call rotations.

Skills

SIEM

EDR

CSPM

Kubernetes security

Incident response

IAM security

Tools

Wiz

CrowdStrike

Scanner

Terraform

Job description

WeightWatchers is a global digital health company.

WeightWatchers is a global digital health company and the world's #1 doctor-recommended, clinically studied behavioral weight health program. For sixty years, we have led the industry by blending science and community to help millions of people build sustainable healthy habits.

As the science of weight health rapidly evolves, so does WeightWatchers. We are redefining the category by developing new clinical pathways for GLP-1 medication access , creating specialized behavioral programs for members on weight‑loss medications, and integrating medical care with our proven habit‑change framework. By combining these clinical breakthroughs with our digital‑first community, we are uniquely positioned to lead the future of weight health care.

Who We Are

Engineering: At WeightWatchers, our Engineering Team drives transformative change by leveraging technology to redefine how millions approach weight health and wellness. The team builds digital solutions that establish personalized connections and foster inclusive virtual communities, empowering members to adopt healthier habits and achieve lasting lifestyle changes. From pioneering a comprehensive telehealth platform, optimizing medication access, diving headfirst into exciting AI integrations we lead with data‑driven innovations that revolutionize healthcare outcomes. Our culture thrives on urgency, collaboration, and a passion for impactful work that directly improves the lives of our members.

What You Will Do

As our Senior Security Engineer - Cloud Security, you will be working alongside an existing team of experienced security engineers and partnering closely with technologists across the company to help build the future of digital health security and protect our patients! We serve our patients from end to end, and security works the same way, all the way from the deepest infrastructure to the patient experience, we want our patients to be safer by being with WW.

What you get to do every day

• Design and build the security for the future of our infrastructure
• Partner with the infrastructure team, engineering team, compliance team and within security teams to maintain and further improve our cloud security posture management and help deliver secure products and services for our patients and doctors
• Lead the charge on AI-native Security. Embrace AI adoption within engineering and usage of AI tooling. We build AI tools Security, Engineering, and the company at large. You'll be in an incredible position to influence safe and thoughtful adoption of AI tooling at the enterprise level.
• Design, develop, and deploy autonomous AI agents that enhance threat detection, alert triage, vulnerability management and incident response‑fundamentally transforming how security teams operate.
• Reimagine traditional security processes through agentic AI. Replace manual runbooks with intelligent agents that can reason, take action, and elevate when needed.
• Take care of real world problems and challenges related to infrastructure security and implement sustainable solutions
• Research threats and attack vectors that impact WW applications and infrastructure
• Devise and bolster defense‑in‑depth through secure‑by‑default frameworks, architectures and processes
• Create solutions and processes to identify, resolve and mitigate security vulnerabilities and risks
• Research threats, attack vectors and real‑world problems that impact WW's applications and infrastructure security
• Devise and bolster defense‑in‑depth through secure‑by‑default frameworks, architectures and processes
• Define and maintain key KPIs for a healthy infra/cloudSec program
• Detect and respond to security incidents and participate in an incident on‑call rotation for critical and non‑critical alerts

What you bring to the role

• Experience with SIEM, EDR, and CSPM tools (Wiz, Crowdstrike, Scanner)
• Experience in cloud security, especially for AWS, anything to do with IAM, secure configuration of services, AWS native security services like AWS Cloudtrail, SCP's, AWS Org, Config etc
• Kubernetes Security Expertise: Deep understanding of Kubernetes security, including secure deployments, network policies, S2S authentication & authorization, RBAC, workload identity, admissions controllers, and runtime security
• Expertise responding to complex incidents across endpoint, network, and cloud as well as experience being an Incident Commander/Responder
• Experience with Infrastructure as Code. We use Terraform
• Ability to understand the whole solution, not just the technology
• Focus on the end to end lifecycle of solving a problem and solutioning for it and not just implementing a security technology
• Have a well‑rounded view for problem solving and a deep care for the patient and your f