Staff Infrastructure Security Software Engineer (Remote)

Position Overview

• Location Type: Remote
• Job Type: Full-Time
• Salary: Not specified

Quora is a "remote-first" company. This position can be performed remotely from multiple countries around the world. Please visit careers.quora.com/eligible-countries for details regarding employment eligibility by country.

About Quora: Quora’s mission is to grow and share the world’s knowledge. To do so, we have two knowledge sharing products:

• Quora: A global knowledge sharing platform with over 400M monthly unique visitors, bringing people together to share insights on various topics and providing a unique platform to learn and connect with others.
• Poe: A platform providing millions of global users with one place to chat, explore and build with a wide variety of AI language models (bots), including GPT-4, Claude 3, Gemini Pro, DALL-E 3 and more. As AI capabilities rapidly advance, Poe provides a single platform to instantly integrate and utilize these new models.

Behind these products are passionate, collaborative, and high-performing global teams. We have a culture rooted in transparency, idea-sharing, and experimentation that allows us to celebrate success and grow together through meaningful work. Join us on this journey to create a positive impact and make a significant change in the world.

This role will be working on both Quora and Poe.

About the Team and Role: You will be a key member of the newly created Security Engineering Team, with a mission to keep Quora safe from security problems by building robust protections around our products, infrastructure and people. Our small engineering team works on challenging problems every day. We have a culture that's rooted in constantly learning and improving, and our engineers are encouraged to think big and experiment with new ideas.

What We’re Looking For:

• Sweat The Right Details: You thrive in understanding the details but will also know to ruthlessly prioritize the critical issues.
• Right-Size The Solution: You recognize guidelines and framework do not always fit the problem and know how to adjust the solution for scalability not always at-scale.
• Ownership: You are outcome-focused and can deftly navigate obstacles, decompose complexities, manage your time, and can communicate your vision to peers and management.

An Ideal Candidate Would… ...be a capable software engineer while also spiking in at least one of the following domain expertise:

• Cloud Infrastructure Security:

  • Hands-on experience securing large-scale cloud environments, particularly with AWS.
  • Passionate about building secure infrastructure-as-code (IaC) pipelines using tools like Terraform or CloudFormation.
  • Understanding of IAM policies, network segmentation, and VPC design.
  • Thorough grasp of monitoring and logging in cloud-native environments.
  • Skilled in identifying misconfigurations, mitigating risks, and driving remediation processes.
  • Bonus points for implementing security in Kubernetes clusters or serverless architectures.

• Automation and Secure Development Practices:

  • Belief in "security as code" and skilled at automating security processes.
  • Ability to develop and integrate security tools into CI/CD pipelines to ensure secure code delivery.
  • Experience with tools like SAST, DAST, and dependency scanning as part of your daily toolkit.
  • Experience integrating security tools into workflows to catch vulnerabilities early.
  • Advocate for secure coding practices and skilled at mentoring teams to write resilient, secure applications.

• Linux/System Security:

  • Well-versed in AWS infrastructure security, with a passion for scalability, reliability, and operational rigor.
  • Understanding that "root" does not mean "root" and passion for container security, POSIX Capabilities, SECCOMP, and a favorite flavor of LSM.
  • Experience playing around with OSQuery and eBPF.

Responsibilities

• Availability for meetings and impromptu communication during Quora's "coordination hours" (Mon-Fri: 9am-3pm Pacific).