[All remote jobs](https://jobicy.com/jobs.md)[![Quora logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/09/WRILS-200916172339-629302.jpg)](https://jobicy.com/company/quora.md)[Quora](https://jobicy.com/company/quora.md) # Senior Software Engineer – Infrastructure Security Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move. [Apply for this job](#job-application)[View company](https://jobicy.com/company/quora.md)ShareRemote from[USA](https://jobicy.com/job-region/usa.md), [Canada](https://jobicy.com/job-region/canada.md)SalaryUSD 172,279–249,640 / yrDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceSeniorPublished26 Oct 2026Apply before25 Nov 2026Listing views103Application actions3Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. AI Summary ## The role, at a glance. Quora is hiring a senior infrastructure security engineer to protect the Quora and Poe platforms through secure cloud architecture, automation, and incident response. The role centers on AWS and Kubernetes security, infrastructure as code, IAM, network segmentation, logging, intrusion detection, and remediation. The engineer will partner with product and infrastructure teams to review designs, establish threat models, define controls, and build security tooling into CI/CD workflows. This is a remote-first full-time role open to candidates in the United States and Canada, with required availability during Pacific Time coordination hours. Strong systems security knowledge, practical coding ability, and the judgment to prioritize high-impact risks are essential. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 4/5RelaxedFast-paced ### Autonomy Level 5/5GuidedFull ownership ### Communication Load 4/5IndependentCollaborative AI insightThis is a senior, high-impact security engineering role spanning cloud, operating systems, containers, secure development, and incident response. It requires independent technical judgment and the ability to influence engineering teams while building durable security controls. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job median (per year)Market rate$210,959.50US market range (per year)$180k–$270k0$297k AI insightThe yearly pay period is inferred from the job context; it was not explicitly stated by the employer. The employer explicitly lists a US annual salary range of $172,279–$249,640 USD, with a midpoint of $210,959.50. The annual market estimate of $180,000–$270,000 USD reflects a senior infrastructure security engineer in the US; compensation may vary by location, depth of cloud and systems expertise, and equity. Separate CAD ranges are listed for Canada. ## Core skills Skills and capabilities most closely associated with this opportunity. [AWS security](https://jobicy.com/jobs?search_keywords=AWS%20security.md)[Kubernetes security](https://jobicy.com/jobs?search_keywords=Kubernetes%20security.md)[Terraform](https://jobicy.com/jobs?search_keywords=Terraform.md)[CloudFormation](https://jobicy.com/jobs?search_keywords=CloudFormation.md)[Infrastructure as Code](https://jobicy.com/jobs?search_keywords=Infrastructure%20as%20Code.md)[IAM](https://jobicy.com/jobs?search_keywords=IAM.md)[Network segmentation](https://jobicy.com/jobs?search_keywords=Network%20segmentation.md)[CI/CD security](https://jobicy.com/jobs?search_keywords=CICD%20security.md)[SAST](https://jobicy.com/jobs?search_keywords=SAST.md)[DAST](https://jobicy.com/jobs?search_keywords=DAST.md)[Dependency scanning](https://jobicy.com/jobs?search_keywords=Dependency%20scanning.md)[Linux security](https://jobicy.com/jobs?search_keywords=Linux%20security.md)[Threat modeling](https://jobicy.com/jobs?search_keywords=Threat%20modeling.md)[Incident response](https://jobicy.com/jobs?search_keywords=Incident%20response.md)[Security automation](https://jobicy.com/jobs?search_keywords=Security%20automation.md) Sample interview questionsHow would you secure a multi-account AWS environment while enabling engineering teams to move quickly?I would establish a baseline using AWS Organizations, least-privilege IAM roles, centralized identity, guardrails, and account-level logging. I would provide reusable Terraform modules and paved-road patterns for common services, then continuously detect configuration drift and prioritize remediation based on exposure and business impact. Describe how you would integrate security into a CI/CD pipeline without creating excessive developer friction. I would add fast, high-signal checks early, such as secret detection, dependency scanning, IaC scanning, and targeted SAST. Findings should have clear ownership, severity-based policies, and practical remediation guidance; blocking should be reserved for critical, credible risks, with measured exceptions and feedback loops to improve signal quality. What would you examine first during a suspected cloud security incident? I would first validate the alert and assess scope, urgency, affected identities, assets, and data exposure. I would preserve relevant logs, contain active risk through reversible controls where possible, investigate identity and API activity, and coordinate communications and recovery actions through the incident-response process. How do Linux capabilities, seccomp, and container hardening reduce risk? They reduce the privilege available to workloads and narrow the impact of compromise. I would run containers as non-root where possible, drop unnecessary capabilities, apply seccomp profiles, use read-only filesystems and minimal images, and monitor runtime behavior for unexpected processes or network activity. How would you conduct a threat model for a new Kubernetes-based service? I would map assets, trust boundaries, identities, ingress and egress paths, secrets, and administrative interfaces. I would identify threats such as privilege escalation, exposed services, compromised CI credentials, insecure workloads, and lateral movement, then define mitigations, owners, validation checks, and residual-risk decisions. Opportunity details ## About this role. [[Quora is a privately held, “remote-first” company](https://www.quora.com/q/quora/Remote-First-at-Quora). This position can be performed remotely from anywhere in Canada or the United States. Please visit [careers.quora.com/eligible-countries](http://careers.quora.com/eligible-countries) for details regarding employment eligibility by country.] ### About Quora: Quora’s mission is to grow the world’s collective intelligence. To do so, we have two platforms: * [Quora](http://quora.com): a global knowledge sharing platform with millions of monthly unique visitors, bringing people together to share insights on various topics and providing a unique platform to learn and connect with others. * [Poe](https://poe.com/): a cloud workspace where millions of users run multiple AI agents on shared context and tools. One subscription, every frontier model, and the collaboration layer that makes them work together. Behind these products are passionate, collaborative, and high-performing global teams. We have a culture rooted in transparency, idea-sharing, and experimentation that allows us to celebrate success and grow together through meaningful work. Join us on this journey to create a positive impact and make a significant change in the world. This role will be supporting both our Quora and Poe products. ### About the Team and Role: You will be a key member of the newly created Security Engineering Team, with a mission to keep Quora safe from security problems by building robust protections around our products, infrastructure and people. Our small engineering team works on challenging problems every day. We have a culture that’s rooted in constantly learning and improving, and our engineers are encouraged to think big and experiment with new ideas. ### What We’re Looking For: * Sweat The Right Details: you thrive in understanding the details but will also know to ruthlessly prioritize the critical issues. * Right-Size The Solution: you recognize guidelines and framework do not always fit the problem and know how to adjust the solution for scalability not always at-scale. * Ownership: you are outcome focused and can deftly navigate obstacles, decompose complexities, manage your time and can communicate your vision to peers and management. ### An Ideal Candidate Would… be a capable software engineer while also spiking in at least one of the following domain expertise: * Cloud Infrastructure Security: You have hands-on experience securing large-scale cloud environments, particularly with AWS. You are passionate about building secure infrastructure-as-code (IaC) pipelines using tools like Terraform or CloudFormation. You understand IAM policies, network segmentation, and VPC design and have a thorough grasp of monitoring and logging in cloud-native environments. You are skilled in identifying misconfigurations, mitigating risks, and driving remediation processes. Bonus points if you’ve implemented security in Kubernetes clusters or serverless architectures. * Automation and Secure Development Practices: You believe in “security as code” and are skilled at automating security processes. You can develop and integrate security tools into CI/CD pipelines to ensure secure code delivery. Tools like SAST, DAST, and dependency scanning are part of your daily toolkit, and you have experience integrating them into workflows to catch vulnerabilities early. You also advocate for secure coding practices and are skilled at mentoring teams to write resilient, secure applications. * Linux/System Security: You are well versed in AWS infrastructure security but also are passionate about scalability, reliability and operational rigor. Beyond that, you know that root does not mean root and are passionate about container security, POSIX Capabilities, SECCOMP and have a favorite flavor of LSM. In your spare time, you love playing around with OSQuery and eBPF. * Product Security (nice-to-have): Not a requirement, but a real plus: experience building secure web applications and APIs, with a working grasp of the OWASP Top 10 and common vulnerabilities such as XSS, CSRF, and SQL injection. It complements the infrastructure security focus of this role and helps when partnering with product teams. ### Responsibilities: * Partner with engineering teams to review cloud and compute architecture design changes * Establish threat models for cloud and compute paved roads to identify security risks * Develop or adopt open-source tools to monitor and harden our cloud Infrastructure, harden our OS, develop security logging pipelines and detect intrusions * Apply your expert knowledge of security best practices for AWS and Kubernetes to inform remediations and the team’s control roadmap * Drive the definition and implementation of security policies and monitor in conformance to the policies * Write code for automations that support security requirements like threat detection, incident containment, and network access management. * Conduct initial incident triage; determine scope, urgency, and potential impact of security incidents; participate in the incident response process At Quora, we value diversity and inclusivity and welcome individuals from all backgrounds, including marginalized or underrepresented groups in tech, to apply for our job openings. We encourage all candidates who share a passion for growing the world’s knowledge, even those who may not strictly meet all the preferred requirements, to apply, as we know that a diverse range of perspectives can have a significant impact on our products and our culture. ### Additional Information: Successful candidates must have availability for meetings and impromptu communication during Quora’s “[coordination hours](https://quora.com/coordination_hours)” (Mon-Fri: 9am-3pm Pacific Time). We are accepting applications on an ongoing basis. Quora offers a wide range of benefits including medical/dental/vision coverage, equity refreshers, remote work reimbursement, paid time off, employee assistance programs, and more. Benefits are country-specific and may vary. There are many factors that will determine the starting compensation, including but not limited to experience, location, education, and business needs. * US candidates only: For US based applicants, the salary range is $172,279 – $249,640 USD + equity + benefits. * Canada candidates only: For Toronto and Vancouver based applicants, the salary range is $221,209 – $256,433 CAD + equity + benefits. For all other locations in Canada, the salary range is $206,461 – $239,337 CAD + equity + benefits. * In equity-eligible countries, we currently also offer a flexible equity program where a portion of equity compensation may be taken as cash. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. AI technology may assist in sorting applications and recording interview notes, but all decisions are made by a member of our team. To ensure a secure hiring process, all final candidates will undergo identity verification and a comprehensive background check prior to onboarding. Job Applicant Privacy Notice: [https://careers.quora.com/quora-global-job-applicant-privacy-notice](https://careers.quora.com/quora-global-job-applicant-privacy-notice) #LI-JC1 #LI-REMOTE Show more [Apply now >](https://jobicy.com/jobs/157102-senior-software-engineer-infrastructure-security-2.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![Eight Sleep logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/09/76713d2f1b795ffde1c2777d9f74e684.jpeg) Eight Sleep Oct 26 New ### [Security Engineer](https://jobicy.com/jobs/157228-security-engineer-4.md) Join the Sleep Fitness Movement At Eight Sleep, we’re on a mission to fuel human potential through optimal sleep. As the world’s first sleep fitness company, we’re redefining what it… * ![Salesloft logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2022/03/8f0ff4d3ba38b945acfa9bbe11e39be1.jpeg) Salesloft Oct 26 New ### [Salesforce Business Systems Administrator](https://jobicy.com/jobs/157206-salesforce-business-systems-administrator-2.md) ROLE: Business Systems Administrator Location: United States, Remote This is a fully remote opportunity and can be worked from any location in the United States. ABOUT THE COMPANY: Salesloft is… * ![TRM Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/34aa038c-221.png) TRM Labs Oct 26 New ### [GEOINT Analyst, Scams](https://jobicy.com/jobs/157174-geoint-analyst-scams.md) Build a Safer World. TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM’s platforms enable investigators to trace illicit activity, build… * ![GitLab logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/12/WRILS-201207055737-109952.jpg) GitLab Oct 26 New ### [Intermediate Security Engineer, Security Incident Response Team (SIRT)](https://jobicy.com/jobs/157093-intermediate-security-engineer-security-incident-response-team-sirt.md) GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50… * ![Huntress logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/91eae3ae-221.jpg) Huntress Oct 26 New ### [Security Operations Analyst – West Coast Shift](https://jobicy.com/jobs/157071-security-operations-analyst-west-coast-shift.md) What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at… * ![Elevenlabs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/e01b4c5d-221.png) Elevenlabs Oct 26 New ### [Infrastructure Security Engineer](https://jobicy.com/jobs/157064-infrastructure-security-engineer.md) About ElevenLabs ElevenLabs is an AI research and product company transforming how we interact with technology. We launched in January 2023 with the first human-like AI voice model. Today, we… * ![Tines logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/9285d376-221.png) Tines Oct 26 New ### [Senior Security Operations Engineer](https://jobicy.com/jobs/157058-senior-security-operations-engineer-4.md) Tines is the intelligent workflow company that powers some of the world’s most important workflows. Tines has been supporting IT and security teams from a diverse range of customers, including… * ![Phantom logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/3d0a3a49-221.png) Phantom Oct 26 New ### [Staff Platform Security Engineer (Security)](https://jobicy.com/jobs/154078-staff-platform-security-engineer-security.md) Phantom is on a mission to connect the world to the freedom of open markets. Tens of millions of people all over the world use Phantom to access global markets… * ![Wrapbook logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2024/03/4daf69c7-221.jpeg) Wrapbook Oct 25 New ### [GRC Principal – Data Privacy and Security](https://jobicy.com/jobs/157024-grc-principal-data-privacy-and-security.md) About Us: Wrapbook is the AI platform for production finance. We’re building a system of action that puts finance teams in control of their whole production, from payroll, to spend,… * ![Cyware logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/09/caccc6b44a54fecac5a7b8e4a4cf9548.jpeg) Cyware Oct 25 New ### [Senior Solutions Architect – Public Sector](https://jobicy.com/jobs/157011-senior-solutions-architect-public-sector.md) Job Title: Solutions Architect Location: Northern Virginia region or DC area. USA Reports To: VP of Solution Delivery & Customer Success About Cyware Cyware delivers an innovative approach to cybersecurity… [Browse all jobs](https://jobicy.com/jobs.md)