Note: The job is a remote job and is open to candidates in USA. Prosper Marketplace is a leading fintech company dedicated to advancing financial well-being. They are seeking a Senior Infrastructure Security Engineer to focus on cloud security, particularly within Google Cloud Platform (GCP), and to proactively prevent, detect, and respond to threats against their cloud-based infrastructure.
Responsibilities
- Own cloud security across Google Cloud Platform (GCP) and Microsoft Azure, driving initiatives from design through execution
- Reduce real risk by operationalizing CNAPP tooling like Wiz - cutting noise, prioritizing high-impact issues, and ensuring remediation lands
- Embed security into infrastructure using Terraform and CI/CD, making controls scalable, consistent, and developer-friendly
- Lead vulnerability management end-to-end, from triage to remediation tracking, partnering with engineering to ship fixes quickly
- Strengthen data and endpoint security (DLP, EDR, identity, device posture) and reduce exposure across cloud environments
- Improve detection and response by building and tuning detections in Google Chronicle and supporting incident response
- Proactively identify and fix cloud misconfigurations (IAM, networking, firewalls, encryption) before they become incidents
- Define practical security standards and runbooks that engineers can easily adopt
- Act as a senior escalation point during security incidents, driving effective triage and resolution
- Leverage AI tools responsibly to accelerate code review, triage, and security analysis while maintaining strong security guardrails
- Mentor engineers and raise the overall security bar through collaboration and clear risk communication
Skills
- Strong hands-on experience securing cloud environments in GCP and/or Azure
- Deep understanding of cloud fundamentals: IAM, networking, logging, monitoring, and encryption
- Proven ability to identify real risk vs. noise using CNAPP tools like Wiz
- Experience with Terraform and security-as-code, including CI/CD integrations
- Solid vulnerability management experience, including prioritization and driving remediation with engineering teams
- Knowledge of data security (DLP, sensitive data discovery) and endpoint/identity platforms (Okta, MDM, Google Workspace)
- Experience with SIEM tools like Chronicle, including detection engineering and incident support
- Strong scripting/automation skills (e.g., Python) to reduce manual security work
- Comfortable owning projects end-to-end in a highly collaborative environment
- Strong familiarity with AI agents and tools, aligned with Prosper Tech's 'forward-thinking but safe' approach to AI adoption
- Understanding of common cloud attack paths and how security failures occur in real environments
- Strong collaboration and communication skills, with the ability to explain risk clearly and drive practical, scalable fixes across cross-functional teams
Benefits
- A 401(k) with a 5% company match to help you build long-term financial security
- Flexible time off and paid parental leave
- An annual wellness allowance
- Comprehensive health coverage
- Udemy access
- Childcare assistance
- Pet insurance
- A bevy of additional savings through Beneplace
Company Overview
Company H1B Sponsorship