Infrastructure & Product Security Engineer

Takumi Security is recruiting for an unnamed client seeking a Security Engineer to secure its cloud platform, Kubernetes infrastructure, and customer-facing applications, APIs, and services. The role builds security tooling and controls, develops detection capabilities, leads vulnerability remediation and incident response, and partners with engineering teams to strengthen security as the platform scales.

Responsibilities:

• Build security tooling and infrastructure. Design and implement internal tools, authentication services, proxies, and other mechanisms that enable secure, efficient access to infrastructure and sensitive resources
• Secure cloud and Kubernetes infrastructure. Identify and address risks across cloud workloads, containerized environments, control planes, service-to-service communication, and the underlying systems that operate the platform
• Improve application and platform security. Review architecture, code, APIs, and sensitive execution paths to identify vulnerabilities and implement practical, durable security improvements
• Build detection and prevention capabilities. Develop automated checks, monitoring, and detection systems that surface high-signal security issues while minimizing noise and unnecessary operational overhead
• Lead vulnerability assessment and remediation. Analyze findings from threat modeling, penetration testing, security scanning, and vulnerability disclosures; assess their real-world impact and work with engineers to prioritize and resolve them
• Partner with engineering teams. Collaborate on secure architecture and design, provide actionable guidance on security best practices, and help engineers incorporate security into their development workflows
• Strengthen identity and access controls. Ensure that authentication, authorization, isolation, and auditability are appropriately implemented across internal systems, infrastructure, and customer-facing services
• Respond to security incidents. Investigate security issues, coordinate technical response, drive remediation, and translate lessons learned into lasting improvements
• Influence product security. Work with product engineering to design and implement security capabilities that meet customer needs without compromising usability or platform performance
• Inform security strategy. Engage with customers on security and compliance requirements, communicate risks and trade-offs to technical and non-technical stakeholders, and help prioritize investments in the company's security posture

Requirements:

• Current US or Canadian work authorization (visa transfers supported, but not new visa sponsorship)
• 6+ years of professional experience in software engineering, security engineering, or a combination of both
• Strong engineering fundamentals and experience designing, building, and maintaining secure production systems, tools, or APIs
• Practical experience across application security and infrastructure or cloud security, with the ability to investigate issues spanning both layers
• Experience assessing vulnerabilities, understanding exploitability and real-world impact, and driving issues through remediation
• A strong understanding of security fundamentals, including authentication, authorization, least privilege, isolation boundaries, and secure system design
• The ability to operate independently, exercise sound technical judgment, and take ownership of security problems from discovery through resolution
• Strong communication and collaboration skills, with the ability to work constructively with engineers and explain security trade-offs to a broader audience
• A pragmatic approach to security: you know how to reduce meaningful risk while preserving engineering velocity and keeping operational overhead low
• Experience securing cloud platforms, Kubernetes clusters, containerized workloads, distributed systems, or multi-tenant infrastructure
• Experience at a rapidly scaling technology company, particularly one building developer infrastructure, cloud services, or a SaaS platform
• Experience with Go, TypeScript, Kubernetes, PostgreSQL, Terraform, or Temporal
• Experience building detection engineering capabilities, operating a SIEM, or developing security automation and monitoring pipelines
• Experience with incident response, security investigations, penetration testing, exploit development, or vulnerability research
• Experience conducting threat modeling, reviewing system architecture, and assessing security risks across complex services
• Familiarity with SOC 2, ISO 27001, HIPAA, PCI DSS, or other security and compliance frameworks
• Contributions to the security community through original research, responsible vulnerability disclosure, open-source projects, technical writing, or presentations