3 months ago
Base Salary
$172k - $250k/yr
Responsibilities
- Partner with engineering teams to review changes to cloud and compute architecture.
- Establish threat models for cloud and compute paved roads to identify security risks.
- Develop or adopt open-source tools to monitor and harden cloud infrastructure and operating systems.
- Develop security logging pipelines and detect intrusions.
- Apply AWS and Kubernetes security expertise to remediation efforts and the team’s control roadmap.
- Define and implement security policies and monitor conformance.
- Write automation for threat detection, incident containment, and network access management.
- Conduct initial incident triage and participate in the incident response process.
Requirements
- Capable software engineer with deep expertise in at least one relevant security domain.
- Hands-on experience securing large-scale cloud environments, particularly AWS, is highly relevant.
- Experience building infrastructure-as-code pipelines with Terraform or CloudFormation is valued.
- Understanding of IAM policies, network segmentation, VPC design, monitoring, and logging in cloud-native environments is expected for cloud infrastructure security work.
- Experience with Kubernetes security or serverless architectures is a bonus.
- Ability to automate security processes and integrate security tools into secure development workflows is valued.
- Experience with SAST, DAST, dependency scanning, secure coding practices, and mentoring engineering teams is relevant.
- Knowledge of AWS infrastructure security, container security, POSIX Capabilities, SECCOMP, Linux Security Modules, OSQuery, and eBPF is relevant to the Linux/system security focus.
- Product security experience with secure web applications and APIs, OWASP Top 10, XSS, CSRF, and SQL injection is a nice-to-have.
- Strong ownership, prioritization, problem decomposition, communication, and judgment are expected.
Benefits
- Medical, dental, and vision coverage
- Equity refreshers
- Remote work reimbursement
- Paid time off
- Employee assistance programs
- Remote-first work arrangement from anywhere in Canada or the United States
- Availability required during coordination hours, Monday through Friday, 9 a.m. to 3 p.m. Pacific Time
- Country-specific benefits may vary
- Identity verification and comprehensive background check required before onboarding
About Quora
Quora builds a global Q&A platform where people share and discover knowledge, and Poe, a multi-model AI chat app that lets users and creators build and monetize bots. Its business model includes advertising and subscriptions such as Quora+ and Poe. Privately held, founded in 2009 and headquartered in Mountain View, California, it serves a worldwide audience with hundreds of millions of monthly visitors.