Q

Quora

Runs a question-and-answer site and an AI chat app

Senior Software Engineer - Infrastructure Security

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-time$172.3k - $249.6k

About the Job

Requirements

  • Hands-on experience securing large-scale cloud environments, particularly with AWS.
  • Experience building secure infrastructure-as-code pipelines using tools such as Terraform or CloudFormation.
  • Knowledge of IAM policies, network segmentation, VPC design, and monitoring and logging in cloud-native environments.
  • Ability to identify cloud misconfigurations, mitigate risks, and drive remediation processes.
  • Experience automating security processes and integrating security tools into CI/CD pipelines.
  • Experience with SAST, DAST, and dependency scanning tools and integrating them into workflows.
  • Knowledge of secure coding practices and ability to mentor teams in building resilient, secure applications.
  • Knowledge of AWS infrastructure security, scalability, reliability, and operational rigor.
  • Knowledge of container security, POSIX capabilities, SECCOMP, and Linux Security Modules.
  • Availability for meetings and impromptu communication Monday through Friday, 9 a.m.–3 p.m. Pacific Time.

Responsibilities

  • Partner with engineering teams to review cloud and compute architecture design changes.
  • Establish threat models for cloud and compute paved roads to identify security risks.
  • Develop or adopt open-source tools to monitor and harden cloud infrastructure and operating systems, develop security logging pipelines, and detect intrusions.
  • Apply security best practices for AWS and Kubernetes to inform remediations and the team's control roadmap.
  • Drive the definition and implementation of security policies and monitor conformance to those policies.
  • Write automation code supporting security requirements such as threat detection, incident containment, and network access management.
  • Conduct initial incident triage, determine the scope, urgency, and potential impact of security incidents, and participate in incident response.

Desired Qualifications

  • Experience implementing security in Kubernetes clusters or serverless architectures.
  • Experience building secure web applications and APIs, with a working grasp of the OWASP Top 10 and common vulnerabilities such as XSS, CSRF, and SQL injection.

About the Company

Quora

Runs a question-and-answer site and an AI chat app

Quora runs a question-and-answer website where people ask and answer questions on any topic, and it makes Poe, an app for chatting with AI models from many companies. In 2023, Poe became the first consumer app to offer Anthropic's Claude chatbot to the public, alongside bots built on OpenAI's models. On Quora, upvotes and personalized feeds surface the most useful answers, and the site earns money from ads and Quora+, a subscription for paywalled answers. Poe users pay subscriptions for more use of text, image, video, and audio models, and outside creators earn money when people use their bots. Former Facebook chief technology officer Adam D'Angelo co-founded Quora in 2009, and it is based in Mountain View, California.

Company size
201-500
Company stage
Late Stage VC
Total funding
$361.1M
Headquarters
Mountain View, CA
Founded
2009

Recently Posted Jobs

Explore more opportunities at Quora

See more jobs