Senior Cloud Infrastructure Security Engineer
Posted on 8/29/2023

1,001-5,000 employees

Comprehensive solution for home needs
Company Overview
At Angi, they invest their resources into growing their business and their people. Angi's mission is to help the best consumers find the best service providers and promote happy transactions remains the same.
Remote in USA
Experience Level
Desired Skills
Data Analysis
DevOps & Infrastructure
Software Engineering
  • You have a BS or an MS in Computer Science, Computer Engineering, Cyber Security, or a related field
  • You have 5+ years of experience working on a security team supporting product/engineering functions, cloud infrastructure, and corporate infrastructure development
  • You have in-depth knowledge of security threats, applied cryptography, and risk assessments
  • You have hands-on experience in AWS specifically with one or more of the following AWS services: GuardDuty, Config, WAF, Shield, Macie, CloudTrail, SecurityHub
  • You have hands-on experience writing infrastructure-as-code in languages such as Terraform, CloudFormation, Helm, etc
  • You have hands-on experience in Kubernetes and container orchestration
  • You have software engineering experience (Python/Java/Scala/Ruby preferred) and an engineering mindset for building reliable and maintainable security infrastructure to support a large organization with CI/CD software engineering practices
  • You have experience working with product development teams to empower them on advancing security initiatives
  • You are familiar with the OWASP Top 10 vulnerabilities and how to remediate them
  • You are familiar with authentication and authorization frameworks or standards such as OAuth, OIDC, SAML, etc
  • You have a willingness to learn and apply new skills and technologies
  • You have hands-on experience working with container technologies and Kubernetes
  • You have hands-on experience with data analytics and observability concepts and associated tooling (SQL, Looker/Tableau, Grafana LGTM stack, NewRelic, etc.)
  • Implement security best practices in our cloud and on-premise IT environment following industry standards / recommendations
  • Identify vulnerabilities, missing patches, and misconfigurations across our cloud, on-premise, and employee infrastructure and ensure there is a scalable approach to prioritizing fixes for any issues identified
  • Implement various types of scanning in our CI/CD pipelines and ensure results are appropriately surfaced to developers
  • Ensure relevant audit and security logs are collected to a central location and exposed to the correct teams for triage, analysis, and incident response
  • Work with auditors and compliance teams to meet required policies and collect required evidence
  • Work with infrastructure engineering teams to ensure that all endpoints throughout the organization are configured with industry aligned security standards, that they have the relevant security tools (MDM, EDR, etc.) installed, and that administrative rights are not needed for non-power users
  • Actively participate in the design and implementation of applications, services, and infrastructure to ensure security and privacy design principles are being followed
  • Triage, escalate, and remediate vulnerabilities found as part of our bug bounty program
  • Work with the product management teams to prioritize fixes for vulnerabilities and work with engineering teams to understand how to fix these issues
  • Get your hands dirty by fixing vulnerabilities, building in security telemetry/instrumentation, and adding security features to our products/applications
  • Design tooling and frameworks to make adoption of security best practices easier for developers when working in our code bases
  • Deploy, manage, and tune infrastructure used to protect our applications from common vulnerability exploitation, account takeover, and denial of service attacks
  • Assist in the creation and maintenance of security training
  • Actively participate in all facets of the incident response lifecycle by participating in a 24/7 on-call rotation
Desired Qualifications
  • Experience defining and implementing internal practices and controls for the PCI-DSS and Sarbanes-Oxley (SOX) information security and compliance standards is a plus
  • Experience presenting at industry conferences or contributing to open source communities is a plus
  • Experience with penetration testing methodologies and tools (BurpSuite, OWASP Zap, etc.) is a plus
  • Experience with infrastructure vulnerability scanning tools (Qualys, Rapid7, Tenable, etc.) is a plus
  • Experience with static analysis tools (, ShiftLeft, Fortify, Veracode, Snyk, etc.) is a plus