Senior Infrastructure Security Software Engineer

About the Company

Quora’s mission is to grow the world's collective intelligence. We operate two main platforms: Quora, a global knowledge-sharing platform, and Poe, an AI platform that allows users to interact with various AI language models.

Responsibilities

• Partner with engineering teams to review cloud and compute architecture design changes
• Establish threat models for cloud and compute paved roads to identify security risks
• Develop or adopt open-source tools to monitor and harden cloud infrastructure and OS
• Develop security logging pipelines and detect intrusions
• Apply expert knowledge of AWS and Kubernetes to inform remediations and control roadmaps
• Drive the definition and implementation of security policies and monitor conformance
• Write code for automations supporting threat detection, incident containment, and network access management
• Conduct initial incident triage and participate in the incident response process

Requirements

• Strong software engineering capabilities
• Expertise in Cloud Infrastructure Security (AWS, Terraform, CloudFormation, IAM, VPC)
• Experience with Automation and Secure Development (CI/CD, SAST, DAST)
• Proficiency in Linux/System Security (Container security, POSIX Capabilities, SECCOMP, eBPF)
• Ability to work during Quora's coordination hours (9am-3pm Pacific Time)

Preferred Qualifications

• Experience with Kubernetes and serverless architectures
• Knowledge of Product Security (OWASP Top 10, XSS, CSRF, SQL injection)
• Experience with OSQuery and eBPF