Staff Security Engineer

Intuit; Mountain View (CA); On-site; USD 207,000 - 280,000; Full time

Job summary

Intuit in Mountain View is seeking an accomplished Senior Security Engineer to design, deploy, and operate large-scale security solutions across cloud-native infrastructure and multi-tenant environments. You will lead initiatives in PKI, key lifecycle management, and secret management while coordinating across security, platform, and development teams.

The role emphasizes automation, Terraform, Kubernetes, Helm, and CI/CD practices to improve security posture, reliability, and incident response

Qualifications

• 10+ years of experience in Security Engineering
• Focus on Security across Cloud, Containerization, IAM and Applications
• Knowledge of network security and multi-tier web architectures
• Experience operating Tier 0 systems in production

Responsibilities

• Lead strategic initiatives to mitigate security risk across the organization
• Implement and instrument security controls across cloud infrastructure
• Work on cloud-native environments with containerized workloads and automated CI/CD pipelines
• Perform scripting and coding to build security tooling and automate tasks
• Define and implement security standards for cloud operations

Skills

Security engineering

Cloud infrastructure

Golang

Java

SRE / DevSecOps

Tools

Kubernetes

Terraform

Helm

CI/CD tools

Job description

Overview

What we expect

• 10+ years of experience in Security Engineering building, operating and architecting a combination home grown and vendor solutions.
• Strong understanding of Computer Engineering with a focus on Security, Infrastructure, Platform, IAM and Application (Cloud, Containerization, Container orchestration, Network, Application Reliability, Database Architecture).
• Demonstrable knowledge of Network Architecture, web application security, and experience supporting multi-tier web application architectures.
• Experience running Infrastructure at scale; utilizing Configuration Management and automation to ensure idempotency, ephemerality, security, and reliability.
• Experience operating Tier 0 Systems in Production which are customer and revenue impacting.
• Expertise in at least 2-3 vertical domains within security engineering is a big plus - Applied Cryptography, IAM, Network Security, Vulnerability Management or Detection & Response Engineering
• Professional knowledge of Golang, Java or other higher-level OOP languages
• Professional experience with Kubernetes, Helm, Terraform and CI/CD toolsets
• Familiar with SRE and Devsecops methodologies and passionate about solving operation problems by utilizing automation and software.
• Ability to communicate effectively vertically and horizontally within the organization via demonstrated written and verbal communication skills.

Responsibilities

What You'll Do

• Lead strategic initiatives to mitigate and remediate security risk across the organization
• Implement & Instrument security controls and tooling across cloud infrastructure to uplevel the security posture
• Work on a cloud native environment leveraging Containerized Workloads, Serverless Architecture and Automated CICD Pipeline to manage Infrastructure-as-a-Service
• Perform Scripting and Coding to build security tooling and for automating redundant tasks.
• Use terraform to deploy security baseline controls, perform code reviews, and provide recommendations for improved security.
• Research and advocate new technologies, architectures, and security products that will support security strategies, patterns, and standards and help address new threat vectors
• Lead Applied Cryptography function focussed on PKI, Key Lifecycle Management and Secrets/Vault Management in a distributed and multi-tenant environment.
• You will be working on at least 2-3 vertical domains within Security Engineering- Applied Cryptography, IAM, Network Security, Vulnerability Management or Detection & Response Engineering
• Operate in a Tier 0 environment with a rigor and discipline to handle rotational on call and incident response.
• Define, document and implement security standards, guidelines and procedures for secure operations in a cloud infrastructure environment.

Qualifications

Preferred Qualifications

• Experience working in a hybrid environment as well as Public Cloud, e.g. Google Cloud Platform, AWS, Azure, etc.
• Strong foundation in data security, encryption standards, key management, PKI, and secrets lifecycle management
• Familiarity with information security principles and best practices in Infrastructure Security

Intuit provides a competitive compensation package with a strong pay for performance rewards approach. This position may be eligible for a cash bonus, equity rewards and benefits, in accordance with our applicable plans and programs (see more about our compensation and benefits at Intuit®: Careers | Benefits). Pay offered is based on factors such as job-related knowledge, skills, experience, and work location. To drive ongoing fair pay for employees, Intuit conducts regular comparisons across categories of ethnicity and gender.

The Expected Base Pay Range For This Position Is

Mountain View $207,000 - $280,000