Requirements

• 5+ years of hands-on experience in information security, infrastructure security, security engineering, security operations, or a closely related field.
• Demonstrated experience securing at least one major infrastructure or security domain, such as Windows, macOS, Linux, Active Directory, cloud platforms, SaaS applications, networking, identity systems, or enterprise endpoints, with ability and interest to work across multiple domains.
• Active TS/SCI security clearance, or eligibility and willingness to obtain one.
• A broad infrastructure security mindset and curiosity about systems beyond primary area of expertise.
• Familiarity with common infrastructure attack paths, adversary tactics, techniques, procedures, and controls to prevent, detect, and contain them.
• Ability to assess complex environments and recognize combined risks across identity, endpoints, applications, networks, cloud services, or data flows.
• Experience evaluating security tools and validating effective deployment and operation of controls.
• Familiarity with infrastructure-as-code, configuration management, CI/CD, or other methods for scalable and repeatable security controls.
• Strong sense of ownership, sound judgment, and integrity.

Nice to Haves

• Experience in complex, high-assurance, regulated, or rapidly changing environments.
• Ability to own projects, make progress through ambiguity, and balance competing priorities while collaborating well with colleagues.
• Comfort switching between strategic problem-solving and hands-on technical work.
• Strong written and verbal communication skills to explain technical risks and collaborate on remediation.
• Contributions to security programs, tooling, automation, incident investigations, or technical research (public or internal).

What You'll Be Doing

• Design, implement, and improve security controls across endpoints, servers, identity systems, cloud services, SaaS applications, networks, and data flows.
• Drive security posture improvements via hardening standards, configuration management, vulnerability remediation, access controls, monitoring, and ongoing validation.
• Assess security risks in new platforms, products, architectures, vendors, and services; turn findings into practical recommendations and engineering work.
• Build and maintain automation for security operations such as configuration validation, drift monitoring, patching, access reviews, policy enforcement, alert triage, and security hygiene.
• Partner with Identity, Infrastructure, Engineering, Legal, and other Information Security teams to strengthen security architecture and address recurring risks.
• Turn insights from assessments, red team exercises, incident investigations, and operational reviews into durable fixes including configuration changes, architectural improvements, policy updates, and automation.
• Build expertise in one or more security domains while contributing across the broader infrastructure security lifecycle.