Lead Infrastructure Security Engineer
About The Position
As a Lead Infrastructure Security Engineer, you will help scale the company’s security capabilities as it develops technology to harness renewable energy from the ocean. Working closely with the Head of Information Security, you will strengthen infrastructure and software security through threat modeling, architecture reviews, automation, and incident response. The role requires broad security infrastructure and engineering skills, professionally useful software engineering skills, and the ability to quickly learn unfamiliar languages and frameworks. Candidates should have strong interpersonal skills and thrive in a creative, scrappy, and collaborative environment.
Requirements
- At least 6 years of experience with Infrastructure Security and general Security Engineering processes.
- At least 2 years of experience as a Team Lead or Manager of a Security team.
- Broad security foundational knowledge, with deep expertise in some areas.
- Professional experience using AI systems and agents for security outcomes.
- Deep hands-on experience with AWS, Azure, or GCP and modern infrastructure tools such as Docker, Kubernetes, and Infrastructure as Code (IaC).
- Bachelor’s degree in Computer Science or Cybersecurity, or equivalent practical experience.
- Strong interpersonal skills and ability to thrive in a creative, scrappy, and collaborative environment.
- Ability to quickly come up to speed with unfamiliar languages and frameworks.
- Ability to travel to conferences, vendors, and test sites as needed.
- Intermittent ability to work longer hours and weekends to support critical needs.
Nice To Haves
- Experience with software development work related to mechanical engineering environments.
- Hands-on experience with industry-standard security tools such as Snyk, GitHub Advanced Security, Burp Suite, and Fortify.
- Familiarity with the OWASP Top 10, CWE Top 25, and secure design patterns.
Responsibilities
- Assist the Head of Information Security with building out the Infrastructure Security and Security Engineering functions.
- Conduct infrastructure, code, and service architecture reviews and provide security guidance.
- Lead engineers in threat modeling services and deployments.
- Work with the Head of Information Security to define culturally useful security metrics.
- Assist with interviewing and onboarding other security personnel.
- Assist with incident response and handling, and provide escalation support as the company grows.
- Integrate, maintain, and automate security scanning tools, including SAST, DAST, SCA, and secrets management, in CI/CD pipelines.
- Build and integrate agentic security tools for company needs.
- Conduct hands-on threat modeling and architectural design reviews for new features and deployments before code is written.
- Perform manual and automated reviews and targeted penetration testing on platforms and internal components.
- Help manage external Vulnerability Disclosure or Bug Bounty programs and translate regulatory compliance requirements into practical engineering tasks.
Benefits
- Flexible paid time off.
- The company pays 100% of a gold-level PPO health insurance plan for full-time employees, their partners, and dependents.
- The company pays 100% of dental insurance for full-time employees, their partners, and dependents.
- The company pays 100% of vision insurance for full-time employees, their partners, and dependents.
- The company pays 100% of disability insurance for a policy providing long-term financial support if the employee becomes disabled.
- Ability to contribute to tax-advantaged accounts, including a 401(k), health FSA, and dependent care FSA.
- Relocation assistance to facilitate a move to Portland, if needed.
- Equity in the company.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
