Security Engineer, Infrastructure

Serval
San Francisco
Workplace: OnsiteFull timeUSD 200,000 - 325,000 annuallyFunction: CybersecurityExperience: 10+ yearsSkills: ["Leadership","Mentoring","Communication","Problem-solving","Strategic thinking"]

Lead the design, implementation, and operation of Serval’s infrastructure security program across AWS, Kubernetes, container runtimes, networking, and CI/CD. Drive least-privilege access, secure-by-default infrastructure, and policy-as-code while mentoring a security-focused team and partnering with Engineering and Product to harden multi-tenant production systems.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Serval
Serval
2 months ago

Security Engineer, Infrastructure

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 9 hours agoStatus: Live

Job Summary

Lead the design, implementation, and operation of Serval’s infrastructure security program across AWS, Kubernetes, container runtimes, networking, and CI/CD. Drive least-privilege access, secure-by-default infrastructure, and policy-as-code while mentoring a security-focused team and partnering with Engineering and Product to harden multi-tenant production systems.
Location: San Francisco
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Sr. Manager level

Key Responsibilities

  • •Design, implement, and operate Serval's infrastructure security program across cloud (AWS), Kubernetes, container runtimes, networking, and CI/CD, including hardening, configuration baselines, workload isolation, and continuous posture management.
  • •Own cloud and identity security, driving least-privilege IAM, secrets management, key management, network segmentation, and the guardrails that keep our multi-tenant production environment safe at scale.
  • •Secure the container and orchestration stack end-to-end. Image provenance and supply-chain integrity, registry and admission controls, runtime sandboxing and isolation, and Kubernetes hardening (RBAC, network policies, pod security).
  • •Build, lead, and directly mentor a team spanning cloud security, platform/Kubernetes security, and infrastructure vulnerability management, hiring and scaling these functions as needed.
  • •Drive infrastructure vulnerability management and remediation, partnering with engineering to identify, prioritize, and durably close exposure across cloud configuration, dependencies, base images, and the software supply chain.

Pay and Benefits

Salary: USD 200,000 - 325,000 annually

Key Requirements

  • •10+ years in cybersecurity with deep expertise in cloud security, infrastructure security engineering, and platform/production hardening.
  • •Hands-on expertise with AWS, Kubernetes, container runtimes (e.g., gVisor/Firecracker-style isolation), and infrastructure-as-code (Terraform).
  • •Experience building and leading infrastructure/cloud security, platform security, and vulnerability management teams.
  • •Stellar leadership skills with a history of driving durable improvements to programs, processes, and people.
  • •Strong software-engineering instincts, able to read/write code and ship policy-as-code and secure-by-default paved roads alongside engineering teams.
Experience:10+ yearsCloud securityInfrastructure securityPlatform securityVulnerability managementMulti-tenant security
Skills:LeadershipMentoringCommunicationProblem-solvingStrategic thinking
Tech Stack:AWSKubernetesGVisorFirecrackerTerraformCI/CDRBACNetwork policiesContainer runtimes

Company Brief

Serval
Serval builds software solutions for secure communications and collaboration, offering tools that help teams connect, share data, and coordinate workflows across distributed environments.
Industry: SaaS
Website