Senior Infrastructure Security Software Engineer Remote

## About the Role This role will be supporting both our Quora and Poe products. ## About the Team and Role You will be a key member of the newly created Security Engineering Team, with a mission to keep Quora safe from security problems by building robust protections around our products, infrastructure and people. Our small engineering team works on challenging problems every day. We have a culture that's rooted in constantly learning and improving, and our engineers are encouraged to think big and experiment with new ideas. ## What We're Looking For Sweat The Right Details: you thrive in understanding the details but will also know to ruthlessly prioritize the critical issues. Right-Size The Solution: you recognize guidelines and framework do not always fit the problem and know how to adjust the solution for scalability not always at-scale. Ownership: you are outcome focused and can deftly navigate obstacles, decompose complexities, manage your time and can communicate your vision to peers and management. An Ideal Candidate Would... - be a capable software engineer while also spiking in at least one of the following domain expertise: ### Cloud Infrastructure Security - You have hands-on experience securing large-scale cloud environments, particularly with AWS. - You are passionate about building secure infrastructure-as-code (IaC) pipelines using tools like Terraform or CloudFormation. - You understand IAM policies, network segmentation, and VPC design and have a thorough grasp of monitoring and logging in cloud-native environments. - You are skilled in identifying misconfigurations, mitigating risks, and driving remediation processes. - Bonus points if you've implemented security in Kubernetes clusters or serverless architectures. ### Automation and Secure Development Practices - You believe in "security as code" and are skilled at automating security processes. - You can develop and integrate security tools into CI/CD pipelines to ensure secure code delivery. - Tools like SAST, DAST, and dependency scanning are part of your daily toolkit, and you have experience integrating them into workflows to catch vulnerabilities early. - You also advocate for secure coding practices and are skilled at mentoring teams to write resilient, secure applications. ### Linux/System Security - You are well versed in AWS infrastructure security but also are passionate about scalability, reliability and operational rigor. - Beyond that, you know that root does not mean root and are passionate about container security, POSIX Capabilities, SECCOMP and have a favorite flavor of LSM. - In your spare time, you love playing around with OSQuery and eBPF. ### Product Security (nice-to-have) - Not a requirement, but a real plus: experience building secure web applications and APIs, with a working grasp of the OWASP Top 10 and common vulnerabilities such as XSS, CSRF, and SQL injection. - It complements the infrastructure security focus of this role and helps when partnering with product teams. ## Responsibilities - Partner with engineering teams to review cloud and compute architecture design changes - Establish threat models for cloud and compute paved roads to identify security risks - Develop or adopt open-source tools to monitor and harden our cloud Infrastructure, harden our OS, develop security logging pipelines and detect intrusions - Apply your expert knowledge of security best practices for AWS and Kubernetes to inform remediations and the team's control roadmap - Drive the definition and implementation of security policies and monitor in conformance to the policies - Write code for automations that support security requirements like threat detection, incident containment, and network access management. - Conduct initial incident triage; determine scope, urgency, and potential impact of security incidents; participate in the incident response process ## About Quora Quora's mission is to grow the world's collective intelligence. To do so, we have two platforms: - Quora: a global knowledge sharing platform with over 300M monthly unique visitors, bringing people together to share insights on various topics and providing a unique platform to learn and connect with others. - Poe: a platform providing millions of global users with one place to chat, explore and build with a wide variety of AI language models (bots), including Claude-Opus-4.7, Nano-Banana-2, GPT-Image-2, GPT-5.5, GPT-5.5-Pro, and more. As AI capabilities rapidly advance, Poe provides a single platform to instantly integrate and utilize these new models. Behind these products are passionate, collaborative, and high-performing global teams. We have a culture rooted in transparency, idea-sharing, and experimentation that allows us to celebrate success and grow together through meaningful work. Join us on this journey to create a positive impact and make a significant change in the world. ## Additional Information Successful candidates must have availability for meetings and impromptu communication during Quora's "coordination hours" (Mon-Fri: 9am-3pm Pacific Time). We are accepting applications on an ongoing basis. ## What We Offer Quora offers a wide range of benefits including medical/dental/vision coverage, equity refreshers, remote work reimbursement, paid time off, employee assistance programs, and more. Benefits are country-specific and may vary.