Job description

About the Role As our Staff Infrastructure Security Engineer, you'll architect and build the security platform that protects our cloud environments, developer ecosystem, and production systems as we scale. This is a deeply hands-on engineering role. You'll spend the majority of your time designing, implementing, and operating security-critical systems. You'll bring technical leadership to infrastructure and engineering teams, and help define how security gets built at Nclusion from the ground up. The right candidate brings serious depth in distributed systems and cloud infrastructure, writes production-quality code, and has built security controls in a regulated environment. This role is based in our Palo Alto office. We work together onsite Monday through Thursday and remotely on Fridays. What You’ll do • Build security systems and tooling for audit logging, monitoring, threat detection, alerting, access controls, and incident investigation. • Design and implement cloud security controls across AWS, Azure, or GCP, with automation for compliance validation, infrastructure governance, and security guardrails. • Own secrets management, service identity, workload isolation, and secure communications across our infrastructure • Embed security directly into CI/CD pipelines through tooling for code scanning, dependency analysis, and deployment enforcement. • Write production-quality, maintainable, and testable code across services, APIs, and automation systems. • Lead technical design on large-scale security initiatives, from architecture through deployment. • Help improve our incident response and business continuity practices, including playbooks, tabletop exercises, investigation tooling, and lessons learned from incidents. What You Bring to the Table • 10+ years in Software Engineering, Platform Engineering, Infrastructure, DevOps, SRE, or Security Engineering, with a track record of leading major technical initiatives and system designs • Strong programming skills in Python, Go, Java, or similar, with hands-on experience building and operating production services, APIs, and distributed systems at scale • Deep experience with AWS, Azure, or GCP, including Kubernetes, containers, cloud-native architectures, and Infrastructure-as-Code tools like Terraform • Experience building security-focused systems or platforms, with solid understanding of cloud security, secrets management, secure software delivery, and security monitoring • Familiarity with IAM, MFA, logging, and audit systems (nice to have) Benefits and Perks • 📈 401k with a match! • 🩺 Medical Insurance • 🦷 Dental Insurance • 👓 Vision Insurance • 💸 Competitive compensation & equity – We believe in sharing success. • ✈️ Flexible PTO – We focus on impact, not tracking vacation days. We encourage a minimum of 14 days. • 🍽️ In-office lunch, team events & culture

Requirements

Must-haves

What You’ll do
Build security systems and tooling for audit logging, monitoring, threat detection, alerting, access controls, and incident investigation.
Design and implement cloud security controls across AWS, Azure, or GCP, with automation for compliance validation, infrastructure governance, and security guardrails.
Own secrets management, service identity, workload isolation, and secure communications across our infrastructure
Embed security directly into CI/CD pipelines through tooling for code scanning, dependency analysis, and deployment enforcement.
Write production-quality, maintainable, and testable code across services, APIs, and automation systems.
Lead technical design on large-scale security initiatives, from architecture through deployment.
Help improve our incident response and business continuity practices, including playbooks, tabletop exercises, investigation tooling, and lessons learned from incidents.
What You Bring to the Table
10+ years in Software Engineering, Platform Engineering, Infrastructure, DevOps, SRE, or Security Engineering, with a track record of leading major technical initiatives and system designs
Strong programming skills in Python, Go, Java, or similar, with hands-on experience building and operating production services, APIs, and distributed systems at scale
Deep experience with AWS, Azure, or GCP, including Kubernetes, containers, cloud-native architectures, and Infrastructure-as-Code tools like Terraform
Experience building security-focused systems or platforms, with solid understanding of cloud security, secrets management, secure software delivery, and security monitoring

Nice-to-haves

Familiarity with IAM, MFA, logging, and audit systems (nice to have)

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsazuregcpci/cdpythongojavakubernetes

Platform: gem
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Pto