Senior Software Engineer - Infrastructure Security (Remote)
Senior engineer on Quora's newly created Security Engineering team, protecting the Quora and Poe products by hardening cloud infrastructure and OS, building security logging/detection pipelines, automating security in CI/CD, and participating in incident response. Core stack: AWS, Terraform/CloudFormation, Kubernetes, Linux, OSQuery/eBPF.
- Compensation
- $172.3K–$249.6K / yr
- Location
- Remote - Multiple Locations
- Work setup
- Remote
- Seniority
- Senior
- Employment
- Not specified
- Experience
- Not specified
- Category
- Software engineering
- Posted
Skills
Must have
- Capable software engineer with deep expertise in at least one of the listed security domains
- Sweat the right details: understand details but ruthlessly prioritize critical issues
- Right-size the solution: adjust solutions for scalability, not always at-scale
- Ownership: outcome focused, decompose complexity, manage time, communicate vision
- Hands-on experience securing large-scale cloud environments, particularly AWS
- Experience building secure infrastructure-as-code (IaC) pipelines using tools like Terraform or CloudFormation
- Understanding of IAM policies, network segmentation, and VPC design
- Thorough grasp of monitoring and logging in cloud-native environments
- Skilled at identifying misconfigurations, mitigating risks, and driving remediation
- Skilled at automating security processes and integrating security tools into CI/CD pipelines
- Daily use of tools like SAST, DAST, and dependency scanning to catch vulnerabilities early
- Advocates secure coding practices and mentors teams to write resilient, secure applications
- Linux/system security expertise: container security, POSIX Capabilities, SECCOMP, LSM
- Availability for meetings during Quora's coordination hours (Mon-Fri: 9am-3pm Pacific Time)
Nice to have
- Experience implementing security in Kubernetes clusters or serverless architectures
- Familiarity with OSQuery and eBPF
- Product security: building secure web applications and APIs, grasp of OWASP Top 10, XSS, CSRF, SQL injection
Full description
[Quora is a privately held, "remote-first" company. This position can be performed remotely from anywhere in Canada or the United States. Please visit for details regarding employment eligibility by country.]
About Quora:
Quora’s mission is to grow the world's collective intelligence. To do so, we have two platforms:
- Quora: a global knowledge sharing platform with millions of monthly unique visitors, bringing people together to share insights on various topics and providing a unique platform to learn and connect with others.
- Poe: a cloud workspace where millions of users run multiple AI agents on shared context and tools. One subscription, every frontier model, and the collaboration layer that makes them work together.
Behind these products are passionate, collaborative, and high-performing global teams. We have a culture rooted in transparency, idea-sharing, and experimentation that allows us to celebrate success and grow together through meaningful work. Join us on this journey to create a positive impact and make a significant change in the world.
This role will be supporting both our Quora and Poe products.
About the Team and Role:
You will be a key member of the newly created Security Engineering Team, with a mission to keep Quora safe from security problems by building robust protections around our products, infrastructure and people. Our small engineering team works on challenging problems every day. We have a culture that's rooted in constantly learning and improving, and our engineers are encouraged to think big and experiment with new ideas.
What We're Looking For:
- Sweat The Right Details: you thrive in understanding the details but will also know to ruthlessly prioritize the critical issues.
- Right-Size The Solution: you recognize guidelines and framework do not always fit the problem and know how to adjust the solution for scalability not always at-scale.
- Ownership: you are outcome focused and can deftly navigate obstacles, decompose complexities, manage your time and can communicate your vision to peers and management.
An Ideal Candidate Would...
be a capable software engineer while also spiking in at least one of the following domain expertise:
- Cloud Infrastructure Security: You have hands-on experience securing large-scale cloud environments, particularly with AWS. You are passionate about building secure infrastructure-as-code (IaC) pipelines using tools like Terraform or CloudFormation. You understand IAM policies, network segmentation, and VPC design and have a thorough grasp of monitoring and logging in cloud-native environments. You are skilled in identifying misconfigurations, mitigating risks, and driving remediation processes. Bonus points if you've implemented security in Kubernetes clusters or serverless architectures.