Senior Infrastructure Security Engineer

## About the role As a Senior Infrastructure Security Engineer at BitMEX, you will play a critical role in securing our infrastructure and development lifecycles. You will drive the successful operation of our cybersecurity tool stack, maintain the security of our CI/CD pipelines, and continuously elevate our container security posture. Additionally, you will lead the deployment of Infrastructure-as-Code (IaC) security measures, integrating both automated and manual vulnerability testing processes to ensure robust protection across all environments. ## Responsibilities - Secure Automation & IaC: Design and implement secure automation solutions across development, testing, and production environments, leveraging Infrastructure-as-Code paradigms to maximize scalability and reliability. - Pipeline & Tooling Management: Implement, manage, and optimize security tooling for our infrastructure and CI/CD pipelines, enforcing strict configuration management and security best practices. - Strategic Collaboration: Partner closely with Product and Platform teams to actively shape and contribute to the Cloud Platform strategic roadmaps. - Technology Leadership & Innovation: Maintain extensive knowledge of advanced software principles and security architectures. Proactively identify long-term technologies of interest and propose strategic development initiatives to keep the organization ahead of the curve. - Industry Research: Continuously monitor the cybersecurity landscape and analyze cutting-edge industry trends, threats, and best practices to ensure our security posture remains modern and resilient. ## Requirements ### Core Security & Architecture - 8+ years of professional experience in the cybersecurity industry. - Deep expertise in security principles across infrastructure, applications, data layers, and integration points. - Demonstrated ability to architect, develop, and integrate enterprise security solutions within the Secure Software Development Lifecycle (SSDLC). - Track record of successfully managing complex, large-scale security projects from inception to completion. ### Cloud & DevSecOps Engineering - Strong hands-on experience with public cloud primitives, containerization, and modern orchestration tools (e.g., Kubernetes, serverless architectures). - Proficiency with Infrastructure-as-Code (IaC) and configuration management (e.g., Terraform, Ansible). - Experience building and securing CI/CD pipelines, applying DevSecOps principles to tools like GitHub Actions and Helm. ### Problem Solving & Leadership - Advanced end-to-end troubleshooting skills for complex distributed systems and security incidents. - Agile mindset with the ability to adapt quickly to evolving security threats and business priorities. - A proven passion for tackling complex technological challenges and driving innovative solutions. ## Nice to have - Advanced Security & Certifications - Industry-recognized security certifications (e.g., CISSP, CCSP, CCSK or GSEC). - Deep understanding of Public Key Infrastructure (PKI) and cryptographic protocols. ## About the company BitMEX