Senior Site Reliability Engineer (Edge Security)

Cvent, Inc.; Tysons, Dallas (VA, TX); On-site; USD 150,000 - 210,000; Full time

Job summary

Cvent, Inc. is seeking a Senior SRE to own edge security, reliability, and security at enterprise scale in Tysons, VA. You’ll manage the edge, on-call rotation, and drive incident prevention through automation and IaC.

Collaborate with product, security, and other SRE teams; apply AI tooling to accelerate triage and knowledge retrieval; build runbooks, dashboards, and automation for scalable operations across a distributed environment.

Qualifications

• 5+ years of hands-on experience in Site Reliability Engineering, DevOps or cloud operations.
• Hands-on experience with AWS WAF, Shield Advanced, or CloudFront in production at real scale.
• TLS and certificate lifecycle management.
• Infrastructure as Code with AWS CDK (or CloudFormation).
• Splunk query fluency and incident analysis.
• Incident management experience for security-adjacent events.
• Change management discipline in complex environments.

Responsibilities

• Own the edge security and routing layer: WAF rule management, CDK deployments, Shield policy configuration and CloudFront management.
• Carry the primary on-call rotation for WAF/Shield and the production edge; triage incidents and write postmortems.
• Handle daily requests for troubleshooting blocked requests, traffic spikes, or design guidance for new apps.
• Manage edge protection estate, including WAF lifecycle, TLS operations, and CloudFront dependencies.
• Ensure scalability, performance, and resilience of edge security systems; convert common problems into guardrails and automation.
• Develop automation for build/test/deploy of edge infrastructure using AWS CDK and PR-based workflows.
• Apply AI tooling to accelerate incident triage, cost analysis, and knowledge retrieval.
• Build knowledge infrastructure: runbooks, WAF catalogs, posture guidelines, platform docs.
• Collaborate with product, security, and SRE teams for holistic edge-security understanding.

Skills

SRE/DevOps

AWS WAF/Shield/CloudFront

TLS/certs management

Infrastructure as Code

AWS CDK

Splunk

Incident management

Change management

Tools

AWS WAF

CloudFront

Shield Advanced

AWS CDK

Splunk

Job description

Overview:

Our Culture and Impact

Cvent is a leading meetings, events, and hospitality technology provider with more than 6,000+ employees and 34,000+ customers worldwide, including 60% of the Fortune 500. Founded in 1999, Cvent delivers a comprehensive event marketing and management platform for marketers and event professionals and offers software solutions to hotels, special event venues and destinations to help them grow their group/MICE and corporate travel business. Our technology brings millions of people together at events around the world. In short, we're transforming the meetings and events industry through innovative technology that powers the human connection.

Cvent's strength lies in its people, fostering a culture where everyone is encouraged to think like entrepreneurs, taking risks and making decisions confidently. We value diverse perspectives and celebrate differences, working together with colleagues and clients to build strong connections.

AI at Cvent: Leading the Future

Are you ready to shape the future of work at the intersection of human expertise and AI innovation? At Cvent, we're committed to continuous learning and adaptation - AI isn't just a tool for us, it's part of our DNA. We're looking for candidates who are eager to evolve alongside technology. If you love to experiment boldly, share your discoveries, and help define best practices for AI-augmented work, you'll thrive here. Our team values professionals who thoughtfully integrate AI into their daily work, delivering exceptional results while relying on the human judgment and creativity that drive real innovation.

Throughout our interview process, you'll have the chance to demonstrate how you use AI to learn, iterate, and amplify your impact. If you're excited to be part of a team that's leading the way in AI-powered collaboration, we'd love to meet you.

Site Reliability is about combining development and operations knowledge and skills to help make the organization better. Whether you have a development background and are interested in learning more about operations and security, or have an operations or security background and are interested in developing internal tools and automation, Cvent SRE can benefit from your skillsets. Ultimately, we are looking for passionate people who love learning, love technology and always want to make things better.

The SRE Security team owns Cvent's edge security and routing layer: AWS WAF, Shield Advanced, CloudFront and F5 LTM. That layer protects every core production domain and thousands of customer-facing endpoints, and it is the team that stands between attacks and the applications enterprises depend on.

As a Senior SRE on the SRE Security team, you will be a core platform owner. You will own the infrastructure, carry the on-call rotation, handle the requests that gate deploys and customer onboarding, and ship the work that keeps the production edge secure and reliable at enterprise scale. We are looking for someone with the drive, ownership and ability to take on challenging problems, both technical and process related, in a dynamic, collaborative and highly distributed, multi-disciplinary team environment. You will work closely with product development teams, Information Security, Cloud Infrastructure and other SRE teams.

We use SRE principles such as blameless postmortems, error budgets and a focus on automation to ensure we're constantly improving our knowledge and maintaining a good quality of life. Overall, we're passionate about continuous improvement, learning and participating in dynamic day to day work where success is rewarded with recognition and upward mobility.

In This Role, You Will:

• Own the edge security and routing layer: WAF rule management, CDK deployments, Shield Advanced policy configuration via AWS Firewall Manager (FMS), and CloudFront distribution management across multiple AWS accounts.
• Carry the primary on-call rotation for WAF/Shield and the production edge; triage incidents by reading WAF logs and Splunk queries, act as incident commander when needed, write the postmortem and close the loop with stakeholders.
• Handle the daily walk-up queue: requests for help troubleshooting blocked requests, spikes in traffic, bot scraping, or just guidance on the best design for a new application.
• Manage the full edge protection estate, including WAF rule lifecycle and WCU cost governance, TLS certificate operations, F5 LTM virtual server management, and CloudFront dependency ownership.
• Ensure the scalability, performance, and resilience of edge security systems and processes; identify recurring problems and anti-patterns and turn them into guardrails and automation.
• Develop build, test and deployment automation for edge infrastructure using AWS CDK and PR-based workflows; champion Cvent standards and best practices.
• Apply AI tooling to accelerate incident triage, cost analysis, and knowledge retrieval, and contribute to expanding the team's AI-assisted workflows.
• Build the team's knowledge infrastructure: runbooks, WAF rule catalogues, Shield posture guidelines, and platform documentation.
• Work with product development teams, Information Security and other SRE teams to ensure a holistic understanding of edge security concerns and their effective and efficient resolution.

Here’s What You Need:

• 5+ years of hands-on experience in Site Reliability Engineering, DevOps or cloud operations, with a demonstrated track record of owning reliability, security, and operational excellence in production environments.
• Hands-on experience with AWS WAF, Shield Advanced, or CloudFront in production at real scale: operational ownership rather than proof-of-concept familiarity. You have authored and managed rules, resolved incidents, and understood the blast radius before deploying.
• TLS and certificate lifecycle management: certificate renewals, CSR generation, domain routing, and multi-domain remediation for production systems.
• Infrastructure as Code with AWS CDK (or CloudFormation). You write the infrastructure, review the diffs, and understand what a change does before it lands.
• Splunk query fluency: WAF log analysis is a core on-call skill. You write the searches and build the dashboards rather than only reading them.
• Incident management experience on security-adjacent events: able to act as IC, coordinate across product and security stakeholders in real time, write clear incident summaries, and drive RCA.
• Change management discipline: ability to communicate changes proactively to stakeholders, document rollout strategies, and manage phased