Senior Security Infrastructure Engineer

Job Description

Quick Take: Axios is a growth-stage startup dedicated to providing trustworthy, award-winning news content in an audience-first format. We are hiring a Senior Security Infrastructure Engineer!

Why it Matters: By leveraging your security focused mindset and infrastructure engineering expertise, you will play a key role in our mission. You will design, build, and support tools, systems, and workflows that amplify and enable the efforts of fellow engineers and keep our infrastructure safe. You will help optimize our stack and ultimately make our systems more secure as we scale to support massive volumes of traffic and continue to launch worthy products into the world.

Go Deeper: In this role, you will make an impact on Axios through the following responsibilities:

• Build standards, patterns, and tools that help engineers in other teams make effective and secure use of infrastructure
• Partner with engineers and product teams across application development and data engineering teams to strengthen security focused architectural approaches
• Consult with other engineering teams providing expertise on secure infrastructure design
• Perform security tasks including threat modeling, secure code review, training, static and dynamic analysis, and automated and manual security testing
• Configure and manage our software defined networking capabilities including VPCs, firewalls, and routing
• Be security-first when designing and evaluating solutions
• Help audit and harden our production monitoring and alerting systems
• Mentor less experienced members of the team through pair-programming and empathetic code review

The Details: Ideal candidates will embody an entrepreneurial spirit and passion for Axios’ mission. A security related mindset and the ability to ensure applications are secure at scale is the target mix. The following skills are a great fit:

• Experience building and maintaining secure AWS infrastructure
• Strong experience with Kubernetes and Kubernetes security best practices
• The ability to perform security audits, environment hardening, and monitoring for security breaches
• Experience with monitoring, alerting and IDS systems like Prometheus, Grafana, Loki, and Alert Logic
• Experience programming in languages like Python, Go, or Bash
• Experience with IaC tooling like Terraform
• Experience with security policies such as SOC 2, NIST, and CIS benchmarks
• An understanding of business continuity and disaster recovery
• Experience having worked in an agile environment
• Fast learner with an ability to work collaboratively

Don’t forget:

• Competitive salary
• Health insurance (100% paid for individuals, 75% for families)
• Primary caregiver 12-week paid leave
• 401K
• Generous vacation policy, plus company holidays
• Commuter and cell phone benefit
• A commitment to an open, inclusive, and diverse work culture
• Annual learning and development stipend

Additional pandemic-related benefits :

• One mental health day per quarter
• $100 monthly work-from-home stipend
• Company-sponsored access to Ginger coaching and mental health support
• OneMedical membership, including tele-health services
• Increased work flexibility for parents and caretakers
• Access to the Axios “Family Fund”, which was created to allow employees to request financial support when facing financial hardship or emergencies
• Class pass discount
• Virtual company-sponsored social events

Equal Opportunity Employer Statement

Axios is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, age, gender identity, gender expression, veteran status, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws.

This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. Axios makes hiring decisions based solely on qualifications, merit, and business needs at the time.