Security & Infrastructure Engineer
PointOne, New York City
What you need
- 5+ years operating AWS infrastructure in production
- Deep IAM expertise (roles, policies, trust relationships, STS)
- Strong AWS networking knowledge (VPC, PrivateLink, Security Groups)
- Experience designing multi-account AWS environments
- Hands-on experience responding to real security incidents
- Strong understanding of cloud attack vectors and privilege escalation
- Experience reducing cloud cost without compromising security
- Comfortable working directly in CDK/Terraform and reviewing infrastructure code
Strong plus: Experience in legal, fintech, government, or other high-sensitivity environments.
Let’s start with what this isn’t
- Not a GRC or paperwork-heavy compliance role
- Not a vulnerability-scanning-only position
- Not a “turn on GuardDuty and call it done” role
You will be shaping critical systems and making architectural decisions that materially affect risk and resilience.