Sr. Infrastructure Security Engineer (Remote)

As a Sr. Infrastructure Security Engineer at Rula, your key responsibilities will revolve around safeguarding patient data and enhancing the overall security of our cloud infrastructure. You'll collaborate closely with engineering and product teams to embed security practices within the company culture, conduct security assessments, and manage security configurations in AWS. Additionally, you'll have the opportunity to develop security standards for Kubernetes, implement Infrastructure-as-Code practices, and run security threat models against production cloud infrastructure.

To be considered for the Sr. Infrastructure Security Engineer role at Rula, you will need a minimum of 4 years of experience in infrastructure or cloud security engineering. You'll also need at least 3 years of AWS engineering experience, either in security or non-security roles. Proficiency in programming with languages such as Python, Javascript, or Go as well as experience with Infrastructure-as-Code tools like Terraform or CloudFormation are essential. Familiarity with HIPAA requirements and security practices for Kubernetes, WAF tuning, and Service Control Policies will also be beneficial.

Rula offers a comprehensive benefits package that prioritizes your well-being. As a full-time Sr. Infrastructure Security Engineer, you'll enjoy a fully remote work environment, generous pay transparency, and a comprehensive range of health benefits including medical, dental, vision, and life insurance. Beyond health benefits, you'll also be eligible for a 401(k) plan, a home office stipend, and paid parental leave, plus unique perks like company-wide shutdown weeks for self-care and wellness events throughout the year.

At Rula, we understand that diversity, equity, and inclusion are fundamental to our mission of improving mental healthcare. As such, we actively seek to cultivate an inclusive hiring culture that values diverse experiences and backgrounds. As a Sr. Infrastructure Security Engineer, you will be part of a company that celebrates individual identity through community and resource groups, ensuring that everyone feels safe, heard, and valued. This approach reflects our commitment to making mental healthcare more accessible and equitable for all.

In your role as a Sr. Infrastructure Security Engineer at Rula, you will work with a variety of tools and technologies that are essential for cloud security. This includes AWS services, Infrastructure-as-Code tools like Terraform, and security frameworks for Kubernetes, including EKS. You will also utilize security best practices in configuring AWS services, managing Web Application Firewalls (WAF), and developing Service Control Policies (SCPs) to enhance the security posture of our cloud infrastructure.

When answering questions about your AWS security experience, provide specific examples of projects you've worked on that involved securing AWS environments. Discuss your familiarity with AWS security features like IAM, VPC, and encryption practices. Highlight any direct impact your work had on security posture, such as mitigating risks or improving compliance with regulations like HIPAA.

Explain the concept of Infrastructure-as-Code (IaC) and discuss tools you have used, such as Terraform or AWS CloudFormation. Provide an example of a project where you implemented IaC, detailing the benefits it brought to security and deployment efficiency. Focus on automation, version control, and collaborative improvements as key factors of success.

When discussing your approach to threat modeling for cloud infrastructure, emphasize your methodology—such as identifying assets, evaluating threats, and determining vulnerabilities. Describe any specific frameworks you follow, like STRIDE or PASTA. Highlight how these models have informed your security strategies in previous roles and led to more resilient cloud architectures.

Outline a multi-layered approach to securing an AWS environment. Consider discussing aspects like implementing least privilege access, utilizing Security Groups, configuring encryption for data at rest, regularly auditing IAM roles, and establishing CloudTrail logging. Make sure to illustrate your familiarity with security best practices and how you've previously applied them.

Articulate your understanding of HIPAA regulations, especially how they apply to cloud-based environments. Discuss specific security measures needed to comply with HIPAA, such as data encryption, access controls, and regular audits. Provide examples of how you've ensured compliance in previous roles and the impact it had on organizational security practices.

Share specific experiences you have had with securing Kubernetes environments, focusing on aspects like role-based access control (RBAC), network policies, and secrets management. Discuss any challenges you faced and how you overcame them, and highlight any tools you used for monitoring and compliance within Kubernetes

Describe a specific incident, focusing on the steps you took to identify, respond, and remediate the security issue. Highlight your analytical skills and your ability to work under pressure, detailing post-incident analysis and lessons learned to prevent future incidents. Your role in communication with stakeholders during the incident response is also crucial.

Discuss your proactive strategies for staying informed about security trends, such as subscribing to security blogs, attending webinars, or participating in professional groups. Mention specific resources, books, or online courses you frequent, and how you apply new insights to your work in a practical way.

Provide a detailed overview of the tools and technologies you prefer for security monitoring and incident response. Mention any SIEM solutions, intrusion detection systems, or log management tools you have experience with. Discuss your approach to selecting tools based on the specific needs of your organization and how they have enhanced your incident response capabilities.

When discussing your experience with Web Application Firewalls, focus on your familiarity with configuring WAF rules and policies tailored to protect against various threats, such as SQL injection and cross-site scripting. Share any successes related to tuning WAF settings based on traffic analysis and threat intelligence to improve application security.