Staff Infrastructure Security Engineer

At Observe. AI, you will report to the VP of Information Security and have the opportunity to design and implement cloud/infrastructure security from scratch. You will work with other security and infrastructure teams to create secure access, networks, defence-in-depth, IAM, and address vulnerabilities and misconfigurations across OS, Infrastructure, and cloud. You will work closely with security operations/incident response teams to provide technical leadership. You will also mentor other junior infrastructure security professionals.

The candidate will have responsibilities across the following functions:

Infrastructure Security Leadership and Strategy:

• Develop and document comprehensive security policies, reference architectures, design patterns, and the strategic roadmap for Infrastructure Security.
• Keep abreast of the latest network and infrastructure security trends and best practices.
• Collaborate with engineering, AWS and architecture teams to ensure all proposed designs meet both business objectives and stringent security requirements.
• Partner with stakeholders across the organisation to integrate and stay updated on the latest infrastructure designs.

Technical Design and Architecture:

• Provide technical leadership to infuse security into all infrastructure and network designs across AWS cloud, SaaS applications, and IT environments.
• Design and re-architect the AWS infrastructure to implement robust security measures, including network segmentation, deep packet inspection, firewalls, VPNs, and VPC configurations.
• Design and develop secure access and network solutions for production environments, owning the overall access management framework.
• Act as the security point of contact for Change Management, reviewing all new infrastructure designs.
• Own all security components and implement them, such as PAM, Access Analyser, Identity Centre and RBAC, Guard Duty, WAF, and PAM modules.
• Design and architect integrations with security tools such as SIEM and cloud workload protection tools.
• Represent Infrastructure Security during regulatory and compliance audits (PCI, SOC, ISO, HITRUST, etc. ).
• Work with corporate IT to implement and continuously review and improve network and security controls within the corporate environment.

Requirements:

• 9+ years of experience across Software engineering, network security, and AWS Security.
• Proven track record as an experienced Infrastructure Security designer and implementer of secure Cloud, networks, and corporate IT infrastructure.
• Experience working at a SAAS product company.
• Experience leading infrastructure security teams or security-focused SRE teams.
• Robust understanding of Network designs and protocols, it is good to have CCNA and other network certifications.
• Ability to multitask and run multiple projects.
• Being comfortable with working off-hours (security incidents cannot be planned).
• Ability to make process under ambiguous situations without clarity.
• First-hand experience with major cloud providers, specifically AWS.
• Experience in large-scale systems and N-tier architectures.
• Excellent communication skills.