Source Job

US

  • Lead threat modeling and security reviews across Wiz's products and cloud infrastructure, identifying attack surfaces and developing scalable mitigation strategies.
  • Build automation, policy-as-code, and security tooling that enables development teams to 'shift left' and integrate end-to-end security into their workflows.
  • Drive vulnerability management and remediation efforts, prioritizing issues, implementing mitigations, and designing strategic preventative controls in software supply chains from development through production.

AWS Kubernetes Python Terraform IAM

20 jobs similar to Security Engineer, Product & Production Infrastructure

Jobs ranked by similarity.

$135,000–$155,000/yr
US

  • Design and enforce cloud security controls and IAM policies across multi-account AWS environments.
  • Embed automated security tools into CI/CD pipelines to catch vulnerabilities pre-deployment.
  • Develop automated detection and remediation workflows using Python, Bash, or Go and IaC tools.

The Tripadvisor Group connects people to experiences worth sharing, aiming to be the world's most trusted source for travel and experiences. It is a publicly traded company with a global portfolio of travel brands, fostering a culture of collaboration, agility, and traveler-first mindset.

Canada

  • Act as a strategic security leader by defining and driving cloud security principles, standards, and reference architectures across the organization.
  • Partner with DevOps and CI/CD engineers to embed shift-left security practices throughout the software development lifecycle.
  • Assess, design, and implement security processes and controls to meet security, compliance, and audit requirements.

LastPass delivers Secure Access Essentials, helping individuals and organizations manage and protect access to AI, applications, and credentials straight from the browser. Trusted by more than 100,000 businesses and millions of users worldwide, they blend strong security with everyday simplicity in a remote-first, collaborative culture.

United States

  • Design and build security for future infrastructure, partnering with engineering and compliance teams.
  • Lead AI-native security initiatives, designing autonomous agents for threat detection and incident response.
  • Devise defense-in-depth frameworks, research threats, and maintain KPIs for a healthy cloud security program.

WeightWatchers is a global digital health company that blends science and community to help millions build sustainable healthy habits. The engineering team drives transformative change through technology, with a culture that thrives on urgency, collaboration, and passion for impactful work.

  • Design and implement security-focused tooling and guardrails for infrastructure.
  • Collaborate with security, SRE, and platform teams to integrate trust principles.
  • Build internal automation to reduce developer cognitive load while enforcing security standards.

BlueCloud is a Snowflake Elite Partner that helps enterprises migrate to AI-ready data platforms. With 450+ consultants and 200+ successful transformations, they combine expertise with AI accelerators to deliver results 40-50% faster.

US

  • Own security of the software build and release pipeline, cloud environments, and AWS identity and access.
  • Operationalize a 15-domain cloud security framework and CrowdStrike CSPM across all AWS estates.
  • Mentor a junior cloud security engineer and build paved-road patterns for engineering teams.

Vermont Information Processing is a leading beverage industry technology provider trusted by over 1,600 suppliers for 50+ years. Backed by Warburg Pincus, VIP is investing in security with executive sponsorship and a funded roadmap.

US

  • Design and build secure CI/CD pipelines with integrated security tooling to accelerate product delivery.
  • Harden cloud infrastructure on AWS and Azure using infrastructure-as-code and enforce policy with OPA or Sentinel.
  • Lead threat modeling, incident response, and mentor engineers on secure coding and operational security.

PAR Technology provides software and hardware solutions for over 100,000 restaurants in 110+ countries. A publicly traded company with a focus on innovation and collaboration, it fosters a culture of continuous improvement.

US

  • Design, build, and optimize secure CI/CD pipelines within GitLab, enforcing DevSecOps principles through automated vulnerability scanning and compliance gates.
  • Manage and scale AWS infrastructure, optimizing workloads on EKS, EC2, S3, and RDS.
  • Establish comprehensive monitoring, logging, and alerting systems across EKS and EC2 nodes to ensure maximum uptime.

LMI is a digital solutions provider that accelerates government impact with innovation and speed, offering commercial-grade platforms and mission-ready AI to federal agencies. Headquartered in Tysons, Virginia, the company serves defense, space, healthcare, and energy sectors, focusing on agility and collaboration.

US

  • Develop playbooks and address security-related tasks in AWS serverless environments.
  • Drive improvements in security posture, including application, endpoint, and access management.
  • Collaborate with product engineering teams to raise the bar for security in CI/CD, dependency management, and secure design reviews.

Stedi is building a new healthcare clearinghouse and RCM engine, accessible via API. With $142 million in funding and a lean, passionate team, they ship products weekly and prioritize automation and eliminating toil.

Spain EU

  • Design and operate secure, scalable cloud infrastructure on AWS/EKS.
  • Develop and maintain CI/CD pipelines and automated deployment processes.
  • Champion observability and SRE practices, including monitoring and performance improvements.

Talan is an international consulting group specializing in innovation and business transformation through technology. With over 7,200 consultants in 21 countries and a turnover of €850M, they deliver future-ready solutions.

$110,000–$118,000/yr
US

  • Own the design, resilience, and health of infrastructure across AWS and hybrid on-prem/Azure/GCP environments.
  • Execute disaster recovery, patching, and security/compliance controls across a large, multi-account, multi-platform estate.
  • Build CI/CD pipelines, automate to reduce toil, and serve as L2 escalation for infrastructure incidents.

HealthEdge offers AI-powered operational infrastructure for health insurance companies, guaranteeing an enduring financial edge in an increasingly competitive market. We're experiencing strong market momentum with a growing number of health plans choosing HealthEdge to modernize their operations and competing effectively, making this a pivotal moment to join and shape the future of healthcare technology.

Europe 16w maternity 16w paternity

  • Own identity, SSO, and device management across Google Workspace and macOS, automating joiner and leaver flows from day one.
  • Secure cloud and SaaS environments by managing IAM, cloud guardrails, and vulnerability management end to end.
  • Bring a security perspective to incidents and audits, using AI-assisted workflows to reduce manual work.

Maze is a user research platform that helps product teams build the right products faster by making user insights accessible. With less than 150 team members and a global remote workforce, Maze fosters a culture of transparency and inclusion.

$130,000–$180,000/yr

  • Protect clients' digital assets by designing and implementing security solutions across multi-cloud environments.
  • Work closely with senior leadership and mentor junior team members while contributing across cybersecurity engineering, GRC, and security strategy.
  • Take ownership of client relationships and bring people along, adapting between engineering, strategy, and compliance conversations.

Riveron helps organizations implement leading governance, risk and compliance practices by combining deep expertise with pragmatic partnership. The firm serves startups, mid-market companies, and PE-backed portfolios with a collaborative and entrepreneurial culture.

$180,000–$200,000/yr
US Unlimited PTO 12w maternity 12w paternity

  • You will own end-to-end data protection: architecting security infrastructure, managing PCI/SOC2 programs, and setting the security roadmap.
  • You will integrate security scanning (SAST, DAST, SCA) into CI/CD pipelines and harden containerized and cloud-native environments.
  • You will configure IAM and SSO platforms, manage EDR/DLP/SIEM tooling, and run security awareness training.

Campminder builds software for summer camps, enabling meaningful experiences for kids. With over 100 employees, they are stable, profitable, and have a values-led culture committed to work/life balance.

Latin America

  • Design and maintain AWS infrastructure using Terraform and ECS/Fargate, ensuring high availability and security.
  • Implement and manage CI/CD pipelines with automated deployment and rollback processes.
  • Collaborate with teams for monitoring, incident response, and security compliance.

Bluelight is a leading software consultancy that designs and develops innovative technology to enhance users' lives. The company is expanding across the United States and Central/South America, fostering a collaborative and enriching work environment where team members can grow and thrive.

Global

  • Identify and reduce security risk across AWS, Kubernetes, containerized workloads, and platform infrastructure.
  • Conduct threat modeling, architecture reviews, and technical risk assessments for platform and infrastructure systems.
  • Partner with infrastructure, platform, and SRE teams to design practical controls and secure-by-default patterns.

Supabase is the Postgres development platform, providing a complete backend solution including Database, Auth, Storage, Edge Functions, Realtime, and Vector Search. With over 540,000 community members and having raised over $1B, our globally distributed team of ~400 people operates across 60+ countries with deep open-source values.

Europe

  • Architect and oversee advanced security monitoring and threat detection frameworks across diverse systems and log sources.
  • Lead the integration of security into the software development lifecycle, including Security-as-Code and automated SAST, DAST, and SCA capabilities within CI/CD pipelines.
  • Own the end-to-end vulnerability management strategy across infrastructure and applications, prioritizing remediation according to business risk.

The partner company operates a large-scale digital platform and a globally distributed technology ecosystem connected to gaming and esports communities. They maintain a flexible, distributed, and inclusive work environment focused on equal opportunity and technical ownership.

$112,000–$179,000/yr
US

  • Design and implement scalable, secure, and reliable cloud solutions in AWS and other platforms.
  • Lead complex production incidents and drive automation to reduce operational toil.
  • Mentor junior engineers and establish cloud engineering best practices.

Peraton is a national security company that provides mission capability integration and transformative IT solutions to government agencies and the U.S. armed forces. They employ a large, diverse workforce and emphasize innovation and reliability in their operations.

$175,000–$200,000/yr
US Canada Unlimited PTO

  • Partner with engineering teams on architecture reviews, threat modeling, and secure design to translate risks into practical recommendations.
  • Improve security tooling, strengthen SDLC and CI/CD controls, and serve as a GCP security subject matter expert.
  • Drive vulnerability management, coordinate penetration testing, and enable engineers through documentation and mentorship.

Doppel builds an AI-native platform for social engineering defense, protecting executives, employees, customers, and brands from phishing, impersonation, and fraud across digital channels. Backed by Andreessen Horowitz and Bessemer Venture Partners, it is a rapidly growing Series C startup with a team focused on cybersecurity expertise and startup velocity.

$116,019–$145,024/yr
US 4w PTO 4w maternity 4w paternity

  • Design, deploy, and manage cloud security solutions to protect AWS and Azure environments.
  • Perform security assessments, vulnerability remediation, and lead key security programs.
  • Automate security processes and integrate DevSec practices into the software development lifecycle.

Navitus is a pharmacy benefit manager (PBM) alternative that aims to make medications more affordable by removing cost from the drug supply chain. The company fosters a diverse, creative, and growth-oriented culture.

Brazil

  • Drive the performance, stability, security, and reliability of production environments with a focus on automation and proactive improvements.
  • Design and maintain infrastructure using Infrastructure as Code tools like Terraform, and manage Kubernetes and cloud environments.
  • Lead vulnerability management, incident response, and secure CI/CD practices to ensure resilience and operational excellence.

Jobgether is a platform that uses AI-powered matching to connect candidates with hiring companies. It processes applications and shares shortlists with employers, offering a remote-first and inclusive work environment.