1 month ago
Base Salary
$172k - $250k/yr
Responsibilities
- Partner with engineering teams to review cloud and compute architecture changes.
- Create threat models for cloud and compute paved roads to identify security risks.
- Develop or adopt open-source tools to monitor and harden cloud infrastructure and operating systems.
- Build security logging pipelines, intrusion detection capabilities, and security automations.
- Apply AWS and Kubernetes security expertise to remediation efforts and the security control roadmap.
- Define security policies and monitor systems for conformance.
- Write automation supporting threat detection, incident containment, and network access management.
- Conduct initial security incident triage and participate in incident response.
Requirements
- Have strong software engineering capabilities and deep expertise in at least one security domain.
- Demonstrate hands-on experience securing large-scale AWS cloud environments.
- Have experience with infrastructure-as-code security using Terraform or CloudFormation.
- Understand IAM policies, network segmentation, VPC design, cloud-native monitoring, and logging.
- Have experience identifying misconfigurations, mitigating risks, and driving remediation.
- Be skilled in automating security processes and integrating security tools into CI/CD pipelines.
- Have familiarity with SAST, DAST, dependency scanning, and secure coding practices.
- Bring Linux/system security knowledge, including container security, POSIX Capabilities, SECCOMP, LSM, OSQuery, or eBPF.
- Product security experience with secure web applications, APIs, OWASP Top 10, XSS, CSRF, or SQL injection is preferred but not required.
Benefits
- Remote-first work arrangement from eligible locations in the United States or Canada.
- Medical, dental, and vision coverage.
- Equity refreshers and a flexible equity program in eligible countries.
- Remote work reimbursement.
- Paid time off and employee assistance programs.
- US compensation is listed at $172,279-$249,640 USD plus equity and benefits; Canadian compensation varies by location and is listed in CAD.
- Availability is required during coordination hours, Monday through Friday from 9 a.m. to 3 p.m. Pacific Time.
Tech Stack
Categories
About Quora
Quora builds a global Q&A platform where people share and discover knowledge, and Poe, a multi-model AI chat app that lets users and creators build and monetize bots. Its business model includes advertising and subscriptions such as Quora+ and Poe. Privately held, founded in 2009 and headquartered in Mountain View, California, it serves a worldwide audience with hundreds of millions of monthly visitors.