Security Engineer, Cloud Infrastructure

Job Description

• Own cloud and infrastructure security for an AI/data company serving enterprise clients and frontier AI labs, with tenant isolation as a critical requirement.
• Architect multi-account AWS isolation using dedicated accounts, SCPs, network boundaries, and data segregation; implement IAM and least-privilege controls across AWS, Snowflake, and internal services.
• Secure production Kubernetes clusters, including pod security standards, network policies, secrets management, and runtime protection.
• Deploy and operate Wiz CSPM, build Terraform/CloudFormation security guardrails, and automate misconfiguration detection and remediation.
• Lead incident-response infrastructure, forensic readiness, blast-radius containment, and compliance-ready environments supporting SOC 2, ISO 27001, and FedRAMP.
• Requires 5+ years of cloud/infrastructure security or security-focused platform/SRE experience; role is full-time, primarily in-person in New York, NY, with first Fridays remote.