Infrastructure Security Engineer

Job Summary

To run the operational core of offensive and vulnerability management programs, the full-time Infrastructure Security Engineer will oversee the bug bounty program, manage vulnerability scanning, and evaluate emerging security products in a remote environment.

Key responsibilities

• Oversee the bug bounty program, including triaging submissions and coordinating with engineering teams to track and verify fixes
• Manage enterprise vulnerability scanners and prioritize findings based on exploitability and business context, ensuring timely remediation
• Research and pilot emerging security tools, integrating effective solutions into existing workflows and automating repetitive tasks

Required qualifications

• 3-5 years of experience in infrastructure, network, or cloud security roles
• Hands-on proficiency with security testing tools, including Burp Suite and Postman
• Working coding ability in Python and shell scripting for automation and integration tasks
• Experience securing major cloud platforms (AWS, Azure, or GCP) and familiarity with CSPM tooling
• Solid understanding of network protocols and perimeter security technologies