Staff Infrastructure Security Software Engineer (Remote)
Offer summary
Qualifications:
Strong background in software engineering., Experience with cloud infrastructure security, especially AWS., Knowledge of security automation and secure development practices., Familiarity with Linux/system security and container security..Key responsibilities:
- Partner with engineering teams to review architecture designs.
- Develop and implement security policies and monitoring tools.
- Conduct incident triage and participate in incident response.
- Automate security processes to detect and mitigate threats.
Job description
[Quora is a privately held, remotefirst company. This position can be performed remotely from multiple countries around the world. Please visit careers.quora.comeligiblecountries for details regarding employment eligibility by country.]
About Quora:Quora’s mission is to grow and share the world’s knowledge. To do so, we have two knowledge sharing products:
Quora: a global knowledge sharing platform with over 400M monthly unique visitors, bringing people together to share insights on various topics and providing a unique platform to learn and connect with others.
Poe: a platform providing millions of global users with one place to chat, explore and build with a wide variety of AI language models (bots), including GPT5, Claude 4.1, Grok 4, Veo 3 and more. As AI capabilities rapidly advance, Poe provides a single platform to instantly integrate and utilize these new models.
This role will be working on both Quora and Poe.
About the Team and Role:You will be a key member of the newly created Security Engineering Team, with a mission to keep Quora safe from security problems by building robust protections around our products, infrastructure and people. Our small engineering team works on challenging problems every day. We have a culture thats rooted in constantly learning and improving, and our engineers are encouraged to think big and experiment with new ideas.
What We’re Looking For:
Sweat The Right Details: you thrive in understanding the details but will also know to ruthlessly prioritize the critical issues.
RightSize The Solution: you recognize guidelines and framework do not always fit the problem and know how to adjust the solution for scalability not always atscale.
Ownership: you are outcome focused and can deftly navigate obstacles, decompose complexities, manage your time and can communicate your vision to peers and management.
An Ideal Candidate Would…
...be a capable software engineer while also spiking in at least one of the following domain expertise:
Cloud Infrastructure Security: You have handson experience securing largescale cloud environments, particularly with AWS. You are passionate about building secure infrastructureascode (IaC) pipelines using tools like Terraform or CloudFormation. You understand IAM policies, network segmentation, and VPC design and have a thorough grasp of monitoring and logging in cloudnative environments. You are skilled in identifying misconfigurations, mitigating risks, and driving remediation processes. Bonus points if you’ve implemented security in Kubernetes clusters or serverless architectures.
Automation and Secure Development Practices: You believe in security as code and are skilled at automating security processes. You can develop and integrate security tools into CICD pipelines to ensure secure code delivery. Tools like SAST, DAST, and dependency scanning are part of your daily toolkit, and you have experience integrating them into workflows to catch vulnerabilities early. You also advocate for secure coding practices and are skilled at mentoring teams to write resilient, secure applications.
LinuxSystem Security: You are well versed in AWS infrastructure security but also are passionate about scalability, reliability and operational rigor. Beyond that, you know that root does not mean root and are passionate about container security, POSIX Capabilities, SECCOMP and have a favorite flavor of LSM. In your spare time, you love playing around with OSQuery and eBPF.
Responsibilities:Availability for meetings and impromptu communication during Quoras coordination hours (MonFri: 9am3pm Pacific Time)
Partner with engineering teams to review cloud and compute architecture design changes.
Establish threat models for cloud and compute paved roads to identify security risks.
Additional Information:We are accepting applications on an ongoing basis.
Quora offers a wide range of benefits including medicaldentalvision coverage, equity refreshers, remote work reimbursement, paid time off, employee assistance programs, and more. Benefits are countryspecific and may vary. For more information on benefits, visit this link: https:www.careers.quora.combenefits
Quora’s mission is to grow and share the world’s knowledge. To do so, we have two knowledge sharing products:
Quora: a global knowledge sharing platform with over 400M monthly unique visitors, bringing people together to share insights on various topics and providing a unique platform to learn and connect with others.
Poe: a platform providing millions of global users with one place to chat, explore and build with a wide variety of AI language models (bots), including GPT5, Claude 4.1, Grok 4, Veo 3 and more. As AI capabilities rapidly advance, Poe provides a single platform to instantly integrate and utilize these new models.
This role will be working on both Quora and Poe.
About the Team and Role:
You will be a key member of the newly created Security Engineering Team, with a mission to keep Quora safe from security problems by building robust protections around our products, infrastructure and people. Our small engineering team works on challenging problems every day. We have a culture thats rooted in constantly learning and improving, and our engineers are encouraged to think big and experiment with new ideas.
Sweat The Right Details: you thrive in understanding the details but will also know to ruthlessly prioritize the critical issues.
RightSize The Solution: you recognize guidelines and framework do not always fit the problem and know how to adjust the solution for scalability not always atscale.
Ownership: you are outcome focused and can deftly navigate obstacles, decompose complexities, manage your time and can communicate your vision to peers and management.
Cloud Infrastructure Security: You have handson experience securing largescale cloud environments, particularly with AWS. You are passionate about building secure infrastructureascode (IaC) pipelines using tools like Terraform or CloudFormation. You understand IAM policies, network segmentation, and VPC design and have a thorough grasp of monitoring and logging in cloudnative environments. You are skilled in identifying misconfigurations, mitigating risks, and driving remediation processes. Bonus points if you’ve implemented security in Kubernetes clusters or serverless architectures.
Automation and Secure Development Practices: You believe in security as code and are skilled at automating security processes. You can develop and integrate security tools into CICD pipelines to ensure secure code delivery. Tools like SAST, DAST, and dependency scanning are part of your daily toolkit, and you have experience integrating them into workflows to catch vulnerabilities early. You also advocate for secure coding practices and are skilled at mentoring teams to write resilient, secure applications.
LinuxSystem Security: You are well versed in AWS infrastructure security but also are passionate about scalability, reliability and operational rigor. Beyond that, you know that root does not mean root and are passionate about container security, POSIX Capabilities, SECCOMP and have a favorite flavor of LSM. In your spare time, you love playing around with OSQuery and eBPF.
Availability for meetings and impromptu communication during Quoras coordination hours (MonFri: 9am3pm Pacific Time)
Partner with engineering teams to review cloud and compute architecture design changes.
Establish threat models for cloud and compute paved roads to identify security risks.
Additional Information:
We are accepting applications on an ongoing basis.
Quora offers a wide range of benefits including medicaldentalvision coverage, equity refreshers, remote work reimbursement, paid time off, employee assistance programs, and more. Benefits are countryspecific and may vary. For more information on benefits, visit this link: https:www.careers.quora.combenefits
Responsibilities:
An Ideal Candidate Would…
...be a capable software engineer while also spiking in at least one of the following domain expertise:
Required profile
Experience
Other Skills
- Time Management
- Communication
- Problem Solving
Network Security Engineer Related jobs
Airbnb
- From: United States (Full Remote)
- Full time
Ensono
- From: United States (Full Remote)
- Full time
Info Resume Edge
- From: Philippines (Full Remote)
- Full time
iZeno
- From: Malaysia (Full Remote)
- Full time
Coinbase
- From: Canada (Full Remote)
- Full time