Senior Infrastructure Security Engineer

Job title: Senior Infrastructure Security Engineer

About the Role Factorial is seeking a Senior Infrastructure Security Engineer to own end-to-end security management of our systems and cloud environments. You will be the guardian of our core foundations, taking full ownership of infrastructure security from risk assessment and vulnerability management to proactive defense and incident response. As a key member of the Security Team, you will ensure that our global infrastructure remains resilient, compliant, and secure.

What You'll Do

• Drive the security strategy for our cloud environments, ensuring security is baked into the architecture from day one.
• Lead vulnerability management across infrastructure, maintain the infrastructure risk register, and prioritize mitigation based on business impact.
• Implement and maintain rigorous hardening strategies across our infrastructure to increase resilience against sophisticated cyberattacks.
• Continuously monitor security alerts and incidents; conduct thorough incident response investigations to identify root causes within the infrastructure stack.
• Develop and manage infrastructure security tooling to enable accurate threat detection and automated compliance.
• Secure the infrastructure and runners within our CI/CD pipelines, ensuring the build/deploy environment is protected.
• Collaborate with IT, DX and SRE teams to integrate infrastructure security best practices and automate security controls.
• Develop, maintain, and regularly update incident response plans and infrastructure security policies.

What We're Looking For

• 5+ years of experience in Infrastructure Security or Security Engineering, specifically within Cloud environments (AWS/Azure), Infrastructure as Code (Terraform), and Containerization (Kubernetes).
• Vulnerability Management Expert: Deep experience managing enterprise-grade vulnerability scanning and risk prioritization workflows.
• Infrastructure Specialist: Strong understanding of network security, OS hardening (Linux/Unix), and identity management (IAM).
• Threat Knowledge: Strong understanding of Cyberattacks and Threat Actor TTPs related to infrastructure and cloud escape.
• Tooling Proficiency: Experience using and managing EDR, CNAPP, SIEM, and vulnerability management solutions.
• Automation Mindset: Proficiency in scripting and automation using Python, Bash, or similar languages to streamline security operations.