Senior Security Software Engineer - Cloud & Infra Security

$200,000 - $275,000/Yr

Stubhub - Aliso Viejo, CA

Full-time - Senior

Aliso Viejo, CA

Administrative and Support Services

About the position

The Senior Cloud Infrastructure Security Engineer at StubHub is responsible for designing and developing advanced security technologies and features that enhance the safety and convenience of the live event ticketing experience. This role involves a strong focus on user needs, commercial judgment, and leadership within the team, contributing to the company's overall security strategy in cloud and infrastructure domains.

Responsibilities

• Develop secure Cloud Account Architectures, focusing primarily on AWS.
• Design and implement network security strategies using security groups, NACLS, and multi-tiered subnet architectures.
• Manage critical security logging and monitoring infrastructure for cloud-native and third-party data sources.
• Operate and manage Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platforms (CWPP).
• Deploy configurations and infrastructure using Infrastructure as Code (IaC) frameworks like Terraform and Cloud Formation.
• Develop and implement governance strategies for infrastructure deployment that integrate security best practices.
• Architect and implement workload identity services in a multi-cloud environment.
• Architect and maintain PKI and secrets management platforms.
• Write and maintain production-quality APIs to automate security processes.

Requirements

• Expert level experience in AWS cloud account architecture.
• Expert level knowledge in Network Security, including AWS networking primitives.
• Expert level proficiency in Identity & Access Management (IAM) Security.
• Expert level communication skills and ability to work effectively across teams.
• Intermediate level experience deploying and maintaining configurations using Terraform.
• Intermediate level experience with modern CSPM and CWPP tools.
• Intermediate level experience with Secrets Management Platforms.
• Intermediate level experience in building and implementing IaC governance strategies.
• Intermediate level proficiency in Python or Go, and Bash scripting.
• Intermediate level experience in container & operating system hardening.

Nice-to-haves

• Intermediate level experience in architecting & implementing internal PKI & Secrets Management services.
• Intermediate level experience in architecting & managing Spire (Spiffe) and Service Mesh services.
• Intermediate level knowledge of Kubernetes (K8s) Security foundations.
• Intermediate level proficiency in DDoS mitigation techniques using AWS Shield.
• Intermediate level proficiency in Azure.

Benefits

• Accelerated Growth Environment
• Top Tier Compensation Package
• Flexible Time Off
• Comprehensive Benefits Package
• Team-Building Events