Infrastructure Security Engineer

Overview In this role you design, implement, and maintain secure cloud and hybrid infrastructure to protect SpaceXAI’s cloud-native applications. You will work with a security-focused, automation-first mindset across multi-cloud and on-prem environments, partnering with engineering to embed security in how systems are built and run. You will address evolving threats, standards, and regulatory requirements while enabling developers with secure, scalable foundations. This is a hands-on role in a mission-driven, flat-structure team that values initiative and excellence. Compensation / Benefitsequitycomprehensive medical, vision, and dental coverage401(k) retirement planshort- and long-term disability insurancelife insurancevarious discounts and perks ResponsibilitiesDesign secure cloud architectures across AWS, GCP, and AzureBuild and secure mission-critical apps in hybrid/on‑prem environmentsDevelop and maintain IaC templates with embedded security controlsAssist with security assessments and audits of cloud infrastructureImplement and manage cloud security tools (CSPM, CWPP, CASB)Manage identities and roles across cloud/hybrid environmentsMonitor and remediate infrastructure for compliance (PCI, NIST CSF, GDPR, HIPAA)Design secure container standards and automation for developer workflowsMaintain Kubernetes security aligned with best practicesCollaborate with engineering to secure CI/CD pipelines and code scanningSecure and enhance CI/CD pipelines; maintain code scanning platformsDevelop security policies, standards, and proceduresOwn security projects end to end; stay current with threats and mitigations Key requirementsBachelor's degree in Computer Science, Cybersecurity, or related field3–5 years in cloud or infrastructure securityStrong understanding of cloud security principles and complianceProficiency in at least one cloud platform (AWS, GCP, or Azure) and security servicesExperience securing hybrid AWS/on-premises or multi-cloud environments including IAMExperience with IaC tools (Terraform, CloudFormation)Familiarity with containerization and its security implicationsKnowledge of network security concepts and protocolsExperience with scripting (Python, Bash) for automationProactive, ownership-driven mindset with strong problem-solving and communicationLocated in SF Bay Area or willing to relocateProactive mindsetOwnershipCritical thinkingTerraformCloudFormationKubernetes security