Senior Security Engineer, Cloud and Infrastructure Security

Weight Watchers is hiring a Senior Security Engineer to strengthen cloud and infrastructure security and protect its patients and digital health services. The role partners with engineering, infrastructure, compliance, and security teams to improve cloud security, develop AI-enabled security capabilities, and respond to threats and incidents.

Responsibilities:

• Design and build the security for the future of our infrastructure
• Partner with the infrastructure team, engineering team, compliance team and within security teams to maintain and further improve our cloud security posture management and help deliver secure products and services for our patients and doctors
• Lead the charge on AI-native Security. Embrace AI adoption within engineering and usage of AI tooling. We build AI tools Security, Engineering, and the company at large. You’ll be in an incredible position to influence safe and thoughtful adoption of AI tooling at the enterprise level
• Design, develop, and deploy autonomous AI agents that enhance threat detection, alert triage, vulnerability management, and incident response—fundamentally transforming how security teams operate
• Reimagine traditional security processes through agentic AI. Replace manual runbooks with intelligent agents that can reason, take action, and escalate when needed
• Take care of real world problems and challenges related to infrastructure security and implement sustainable solutions
• Research threats and attack vectors that impact WW applications and infrastructure
• Devise and bolster defense-in-depth through secure-by-default frameworks, architectures and processes
• Create solutions and processes to identify, resolve and mitigate security vulnerabilities and risks
• Research threats, attack vectors and real-world problems that impact WW’s applications and infrastructure security
• Devise and bolster defense-in-depth through secure-by-default frameworks, architectures and processes
• Define and maintain key KPIs for a healthy infra/cloudSec program
• Detect and respond to security incidents and participate in an incident on-call rotation for critical and non-critical alerts

Requirements:

• Experience with SIEM, EDR, and CSPM tools (Wiz, Crowdstrike, Scanner)
• Experience in cloud security, especially for AWS, anything to do with IAM, secure configuration of services, AWS native security services like AWS Cloudtrail, SCP's, AWS Org, Config etc
• Kubernetes Security Expertise: Deep understanding of Kubernetes security, including secure deployments, network policies, S2S authentication & authorization, RBAC, workload identity, admissions controllers, and runtime security
• Expertise responding to complex incidents across endpoint, network, and cloud as well as experience being an Incident Commander/Responder
• Expertise responding to complex incidents across endpoint, network, and cloud
• Capable of understanding an unfamiliar system enough to successfully respond to an incident involving the system
• Experience with Infrastructure as Code. We use Terraform
• Ability to understand the whole solution, not just the technology
• Focus on the end to end lifecycle of solving a problem and solutioning for it and not just implementing a security technology
• Have a well-rounded view for problem solving and a deep care for the patient and your fellow employees' experience as you surpass security challenges
• Hunger to drive decision making, collaboration and to have deeper opinions on security design
• Hands-on experience building, deploying, or securing AI/ML systems, including LLM-based applications and agentic workflows
• Proven track record of building production-grade security AI agents or agent-powered tools — not just evaluating or advising on them