Senior Infrastructure Security Engineer

We are looking for a Senior Infrastructure Security Engineer to help build and maintain solutions that will help keep our Cloud environment secure and compliant. Our ideal candidate has a passion for security and is a self-driven individual who proactively pursues and develops creative solutions to complex problems. We’re looking for someone who is thoroughly familiar with the operations of Kubernetes and cloud environments, who can use that strong contextual knowledge to architect strong perimeter and defense-in-depth strategies and mitigate vulnerabilities, and knows how to architect a robust and hardened solution resilient to attackers. We’re looking for self-driven individuals that build strong relationships, are meaningful team players, are transparent with others, and have strong problem analysis skills. This position will serve as a foundational member of the Infrastructure Security team at Podium; working closely with our engineering team to help secure our rapidly expanding cloud environment.

What you will be doing:

• Develop, evangelize, and monitor the adoption of sound cloud security practices
• Develop new, and review/update existing configurations of Podium’s infrastructure to improve our security posture
• Ownership and management of preventative security measures and services related to Podium, i.e. WAF, HIDS, Vulnerability Scanners, Cloud Security Scanners, etc… 
• Identify security gaps in our visibility and infrastructure security processes, and develop solutions and project plans to address those gaps
• Conduct risk assessments of all major cloud infrastructure endpoints and spearhead projects to mitigate those risks
• Providing understandable and transparent rationale for security decisions to all stakeholders

What you should have:

• Minimum of 3+ years of experience securing Cloud Infrastructure
• 3+ years of SRE/DevOps/Cloud Infrastructure management experience
• Experience with infrastructure security tools such as Cloudflare, GuardDuty, and other IDS solutions
• Vulnerability management experience for container and host-based vulnerabilities
• Experience with containerized environments, preferably Kubernetes
• An understanding of microservice oriented architecture and the associated security best practices
• Strong AWS infrastructure management experience
• Strong Linux system administration experience
• Familiarity with AWS Cloudtrail and AWS Config
• Familiarity with common host-based vulnerabilities and insecure cloud configurations

What we hope you have:

• Basic scripting skills, preferably in Python or Bash
• Familiarity with configuration languages like Terraform, Ansible, Chef, etc…
• AWS/Kubernetes penetration testing experience
• Been an active member in the security community (e.g. OSS Contributions, OWASP, conference talks, CTFs, etc.)
• Familiarity with SOC2, HIPAA, PCI, or other regulatory or compliance standards

BENEFITS

• Remote first work setting for Engineering & Product
• Great opportunities for career growth
• 401k with a competitive matching contribution plan
• Unlimited Vacation (yes, we want you to have a work-life balance)
• Great medical, dental, vision benefits
• Yearly home office upgrade stipend
• Yearly team building on-site events at HQ in Utah
• Multiple internal hackathons a year
• Life insurance, long and short-term disability coverage
• Paid maternity and paternity leave
• Swag

Podium is an equal opportunity employer. Podium provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, national origin, sexual orientation, gender identity or expression, age, disability, genetic information, marital status or veteran status.