Infrastructure Security Engineer

This is a Fully Remote Job 1. About Our Client: The organization operates in the AI-driven lending marketplace, addressing the complexity and cost barriers in credit access for millions of Americans. It collaborates with banks and credit unions to deliver affordable credit through advanced AI technology that makes smarter, fairer lending decisions. The platform employs extensive data signals to predict borrower risk and supports financial progress. The organization maintains a digital-first work culture with distributed teams across many US and Canadian cities, emphasizing a balance between remote flexibility and in-person collaboration. 2. About the Opportunity: The Infrastructure Security Engineer role focuses on designing, building, and enhancing security controls that protect the production infrastructure and developer platforms. This position works closely with infrastructure, platform, and product teams to identify security risks, review designs, and automate preventative controls. The role is critical in reducing risk and ensuring secure infrastructure deployment, contributing to safer product delivery. The engineer will independently lead medium-sized projects, troubleshoot security challenges, and implement improvements that enhance the security baseline. 3. Responsibilities: Design and implement security controls for cloud, platform, and deployment systems with an emphasis on secure defaults and reducing risk Collaborate with platform, SRE, and infrastructure teams to review architectural and infrastructure changes and develop remediation plans Develop and improve automation for cloud IAM, Kubernetes, container environments, secrets management, and infrastructure-as-code workflows Identify and address systemic infrastructure weaknesses such as misconfigurations and insecure defaults Support vulnerability management by prioritizing findings, validating fixes, and enhancing detection and prevention methods Assess and improve security for AI-assisted developer workflows and AI-enabled systems interacting with sensitive environments Respond to production security incidents, investigate root causes, and implement follow-up improvements Document security patterns, participate in design and code reviews, and help raise the overall security quality across engineering teams 4. Requirements: Bachelor’s degree with 3+ years experience in security engineering, infrastructure engineering, or related software engineering roles Experience securing or operating cloud-native infrastructure, preferably in AWS or similar environments Knowledge in at least one of the following areas: cloud IAM, Kubernetes/container security, network security, secrets management, or vulnerability management Proficiency in coding or automation using Python, Go, Java, or similar languages Experience reviewing system designs, infrastructure changes, or architecture proposals with actionable security outcomes Familiarity with infrastructure-as-code and CI/CD tools such as Terraform, Helm, GitHub Actions, or equivalent Capability to investigate and resolve moderately complex production or security issues using logs, metrics, and debugging tools Understanding of security considerations for responsible use of AI-assisted engineering tools, including data exposure and safe automation 5. Pay Range and Compensation Package: The pay range and compensation package for this role will be determined based on the candidate’s experience, skills, and other relevant factors. Equal Opportunity Statement: Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin. Note: TalentHop is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.