Sr. Infrastructure Security Engineer

YO IT Consulting is seeking a Sr. Infrastructure Security Engineer to design and evolve the security foundations of an AI-native organization. The role involves architecting security systems across multiple cloud platforms, developing automated guardrails, and embedding security into the development lifecycle.

Responsibilities:

• Architect security systems across AWS, GCP, and Azure that scale with rapid product iteration
• Build automated guardrails and self-healing infrastructure to eliminate entire classes of vulnerabilities
• Design and implement Zero Trust primitives—identity, access, and policy as code—from first principles
• Develop Detection-as-Code pipelines, treating detection logic like production systems (versioned, tested, deployable)
• Explore and deploy AI-native approaches to threat modeling, anomaly detection, and incident response
• Partner closely with engineering and research teams to embed security into the development lifecycle
• Write clearly and think clearly—security decisions should be legible, reviewable, and composable
• Continuously rethink assumptions and evolve our security posture as new threats and paradigms emerge

Requirements:

• Deep experience securing distributed, multi-cloud systems (AWS, GCP, Azure)
• Strong programming ability (Python, Go, Rust, or similar) with a bias toward automation and systems thinking
• Experience with Infrastructure as Code (Terraform, Pulumi, etc.) and integrating security into CI/CD pipelines
• Strong understanding of identity systems, least privilege, and Zero Trust architectures
• Familiarity with modern detection ecosystems (e.g., Sigma, Panther, GuardDuty, SCC) and signal quality challenges
• A mindset that treats security as an engineering and systems problem—not compliance
• Comfort working in a highly asynchronous, writing-heavy, and fast-paced environment
• Experience securing Kubernetes and containerized workloads at scale
• Contributions to open-source security tools or research
• Experience applying or experimenting with AI/ML in security contexts
• Strong opinions about how security should evolve in an AI-first world