Senior Software Engineer - Infrastructure Security (Remote)

Quora · Remote · Remote - Multiple Locations · United States · Canada ·
Fully remoteFull-timeSenior5+ years
COMPENSATION
€•• – ••k
0 applicants so far

Listed on the employer's job board (Ashby)

  • Senior level role
  • Fully remote (US/Canada)
  • AWS + Kubernetes focus
  • Security automation
  • Equity compensation

Join Quora's newly formed Security Engineering Team to protect the Quora knowledge-sharing platform and the Poe AI workspace. You will build robust protections around products, infrastructure, and people while solving challenging security problems in a collaborative, remote-first environment.

The team values transparency and experimentation, encouraging engineers to think big and continuously improve. You will work on securing large-scale cloud environments and developing tools to detect and mitigate risks.

What you'll do

  • Partner with engineering teams to review cloud and compute architecture designs
  • Establish threat models to identify security risks in paved roads
  • Develop or adopt open-source tools to monitor and harden cloud infrastructure
  • Apply security best practices for AWS and Kubernetes to guide remediations
  • Define and implement security policies and monitor compliance
  • Write code for automations supporting threat detection and access management
  • Conduct initial incident triage and participate in response processes

What you'll need

  • Hands-on experience securing large-scale cloud environments, particularly AWS
  • Experience building secure infrastructure-as-code pipelines using Terraform or CloudFormation
  • Strong understanding of IAM policies, network segmentation, and VPC design
  • Ability to automate security processes and integrate tools into CI/CD pipelines
  • Proficiency with SAST, DAST, and dependency scanning tools
  • Deep knowledge of Linux system security, container security, and OS hardening
  • Outcome-focused mindset with strong communication and prioritization skills

Nice to have

  • Experience implementing security in Kubernetes clusters or serverless architectures
  • Familiarity with OSQuery and eBPF for system monitoring
  • Experience building secure web applications and APIs
  • Knowledge of OWASP Top 10 and common vulnerabilities like XSS and SQL injection

Stack

  • AWS
  • Terraform
  • CloudFormation
  • Kubernetes
  • Linux
  • OSQuery
  • eBPF

How you'll work

  • Fully remote from anywhere in the United States or Canada
  • Must be available during coordination hours: Mon-Fri 9am-3pm Pacific Time
  • Remote-first company culture

What you get

  • Medical, dental, and vision coverage
  • Equity refreshers and flexible equity program
  • Remote work reimbursement
  • Paid time off
  • Employee assistance programs