Sr. Infrastructure Security Engineer in United States Embassy at Jobgether

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Sr. Infrastructure Security Engineer based in United States.

This role is designed for a security professional who specializes in protecting modern cloud environments and strengthening enterprise infrastructure resilience.
You will take ownership of cloud security initiatives across major platforms, driving improvements from architecture through execution.
The position combines hands-on engineering, security strategy, automation, and cross-functional collaboration to reduce risk at scale.
You will work with advanced security technologies, helping teams build secure-by-design systems and respond effectively to evolving threats.
As a senior member of the security organization, you will influence best practices, mentor engineers, and improve the overall security posture.
This is an opportunity to contribute to a fast-moving environment where innovation, automation, and responsible AI adoption shape the future of security operations.

The Sr. Infrastructure Security Engineer will be responsible for securing cloud infrastructure, improving security operations, and partnering with engineering teams to implement scalable security solutions.

• Own cloud security initiatives across Google Cloud Platform (GCP) and Microsoft Azure, leading projects from design through implementation and operationalization.
• Strengthen cloud security posture by managing CNAPP capabilities, prioritizing meaningful risks, reducing security noise, and driving remediation efforts.
• Embed security controls into infrastructure workflows using Terraform, CI/CD pipelines, and security-as-code practices.
• Lead vulnerability management activities, including identifying vulnerabilities, prioritizing risks, coordinating remediation, and tracking improvements.
• Enhance data and endpoint protection through solutions covering data loss prevention, endpoint detection, identity management, and device security.
• Develop and improve threat detection capabilities using SIEM platforms, including creating detection logic and supporting incident response activities.
• Identify and remediate cloud security weaknesses involving IAM, networking, firewall configurations, encryption, and access controls.
• Create practical security standards, documentation, and operational runbooks that engineering teams can easily adopt.
• Serve as a senior escalation point during security incidents, supporting investigation, response, and resolution efforts.
• Leverage AI-powered tools responsibly to improve security analysis, automation, code reviews, and operational efficiency.
• Mentor engineers and promote security awareness through collaboration, knowledge sharing, and clear communication of technical risks.

The ideal candidate brings extensive experience in cloud security engineering, infrastructure protection, and security automation, with the ability to collaborate across technical teams and translate security risks into practical solutions.

• Bachelor’s degree in Computer Science, Information Security, or a related technical field with 8+ years of relevant experience, or a Master’s degree with 6+ years of experience.
• Strong hands-on experience securing cloud environments, particularly Google Cloud Platform (GCP) and/or Microsoft Azure.
• Deep understanding of cloud security fundamentals, including IAM, networking, logging, monitoring, encryption, and identity management.
• Proven experience using CNAPP tools such as Wiz to identify, prioritize, and remediate real security risks.
• Strong knowledge of Terraform, infrastructure-as-code, and integrating security controls into CI/CD workflows.
• Experience managing vulnerability programs and partnering with engineering teams to deliver remediation.
• Familiarity with data security practices, including DLP, sensitive data discovery, endpoint protection, and identity platforms such as Okta or Google Workspace.
• Experience with SIEM solutions such as Chronicle, including detection engineering and incident response support.
• Strong scripting and automation skills using languages such as Python.
• Understanding of common cloud attack paths, infrastructure weaknesses, and security failure scenarios.
• Experience working with AI tools and agents while maintaining strong security and governance practices.
• Ability to manage projects independently, communicate technical concepts clearly, and collaborate effectively across teams.
• Strong problem-solving skills with the ability to operate in complex, fast-changing environments.

• Competitive salary package designed to reward experience and expertise.
• 401(k) retirement plan with a company contribution match.
• Flexible work options, including fully remote opportunities and access to collaborative office environments.
• Comprehensive healthcare coverage supporting employee well-being.
• Flexible paid time off and paid parental leave.
• Annual wellness allowance to support personal health and development.
• Professional growth opportunities, including access to learning platforms and training resources.
• Additional employee perks such as childcare assistance, pet insurance, and savings programs.
• A collaborative, innovation-driven culture focused on teamwork, curiosity, and continuous improvement.