Engineer, Infrastructure Security

Aaru•New York, NY

1d•Onsite

About The Position

Aaru is hiring an infrastructure security engineer to own security across the company and build the systems and practices needed to scale safely. The role sets priorities and implements solutions across cloud infrastructure, identity and access management, autonomous agent security, software delivery, supply chain, and employee devices. This is an engineering role with broad ownership. The engineer will work closely with engineering, research, and compliance to identify consequential risks, make pragmatic tradeoffs, and incorporate security into Aaru’s operations. The role is based in New York City, and the company works in-office five days a week. Candidates should be in the New York City metropolitan area or open to relocation.

Requirements

Experience securing production infrastructure.
Strong infrastructure engineering fundamentals across networking, cloud services, containers, and distributed systems.
Ability to assess unfamiliar systems, identify meaningful risks, and determine what to prioritize.
Experience building internal tools or platforms that engineers want to use.
Ability to explain security tradeoffs clearly and work with teams to resolve them.

Nice To Haves

Experience working at the frontier of agentic development.
Strong understanding of modern authentication and authorization primitives.
Experience securing VMs and engineering supply chains.
Strong knowledge of networking protocols such as HTTP, TLS, TCP, or related systems.
Experience designing infrastructure for high-scale data or machine learning workloads.
A track record of finding and eliminating bottlenecks in complex systems.

Responsibilities

Establish Aaru’s security roadmap and own its execution, prioritizing risks as the company grows.
Build security controls for autonomous and coding agents, including sandboxing and scoped access to tools, data, and networks.
Own identity and access management across production systems and company tools, including SCIM and RBAC.
Secure cloud infrastructure and the software supply chain, including CI/CD pipelines, dependencies, secrets, and build artifacts.
Operate and evolve endpoint security, device management, and vulnerability findings.
Build monitoring, detection, and incident response capabilities.
Partner with engineers on threat modeling and architecture reviews.
Work with compliance leads to ensure security controls are effective, auditable, and practical.