Senior Software Engineer - Infrastructure Security (Remote)

Quora

15d • $172,279 - $249,640 • Remote

About The Position

Quora is hiring a Senior Software Engineer for its newly created Security Engineering Team, supporting both Quora and Poe. The role focuses on protecting products, infrastructure, and people by developing robust security protections. The team works on challenging security problems and values continuous learning, experimentation, and improvement. The position is remote and can be performed from anywhere in Canada or the United States, subject to employment eligibility by country. Successful candidates must be available for meetings and impromptu communication during coordination hours, Monday through Friday, 9 a.m. to 3 p.m. Pacific Time.

The ideal candidate is a capable software engineer with depth in at least one of cloud infrastructure security, automation and secure development practices, or Linux/system security. Product security experience is a plus. The role partners with engineering teams on secure architecture, threat modeling, security tooling, policy implementation, automation, and incident response.

Requirements

• Capable software engineering skills, with domain expertise in at least one of cloud infrastructure security, automation and secure development practices, or Linux/system security.
• For cloud infrastructure security: hands-on experience securing large-scale cloud environments, particularly AWS; familiarity with infrastructure-as-code tools such as Terraform or CloudFormation; understanding of IAM policies, network segmentation, VPC design, and cloud-native monitoring and logging; and skill in identifying misconfigurations, mitigating risks, and driving remediation.
• For automation and secure development: ability to automate security processes and develop or integrate security tools into CI/CD pipelines; experience with SAST, DAST, and dependency scanning; and ability to advocate for secure coding practices and mentor teams.
• For Linux/system security: knowledge of AWS infrastructure security, scalability, reliability, and operational rigor, as well as container security, POSIX Capabilities, SECCOMP, and Linux Security Modules.
• Ability to understand technical details while prioritizing critical issues.
• Ability to right-size solutions for the problem and adjust guidelines or frameworks as needed.
• Outcome-focused ownership, including navigating obstacles, decomposing complex work, managing time, and communicating a vision to peers and management.

Nice To Haves

• Experience implementing security in Kubernetes clusters or serverless architectures.
• Experience with OSQuery and eBPF.
• Experience building secure web applications and APIs, understanding the OWASP Top 10, and familiarity with vulnerabilities such as XSS, CSRF, and SQL injection.

Responsibilities

• Partner with engineering teams to review cloud and compute architecture design changes.
• Establish threat models for cloud and compute paved roads to identify security risks.
• Develop or adopt open-source tools to monitor and harden cloud infrastructure and operating systems, build security logging pipelines, and detect intrusions.
• Apply expert knowledge of security best practices for AWS and Kubernetes to inform remediations and the team's control roadmap.
• Drive the definition and implementation of security policies and monitor conformance to those policies.
• Write code for automations that support security requirements such as threat detection, incident containment, and network access management.
• Conduct initial incident triage to determine scope, urgency, and potential impact, and participate in the incident response process.

Benefits

• Medical, dental, and vision coverage.
• Equity refreshers.
• Remote work reimbursement.
• Paid time off.
• Employee assistance programs.
• Flexible equity program in equity-eligible countries, where a portion of equity compensation may be taken as cash.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed