Infrastructure Security Engineer

As an Infrastructure Security Engineer at Glean, you will architect and secure our cloud infrastructure, focusing heavily on AWS and Azure. Your responsibilities include identifying security vulnerabilities, implementing cloud-native security technologies, and developing features related to authentication and authorization. Additionally, you will collaborate with various teams to devise secure cloud solutions and train others on security best practices.

To be considered for the Infrastructure Security Engineer role at Glean, you should possess a Bachelor’s degree in Computer Science, Information Security, or related fields, along with proficiency in at least one programming language such as Python, Go, or Java. Experience with cloud platforms like AWS or Azure and familiarity with security tools are also essential.

Glean is committed to fostering a transparent culture of learning and development. As an Infrastructure Security Engineer, you'll have access to various opportunities to enhance your skills, including training programs and workshops that focus on cloud security practices and technologies. You'll be encouraged to grow within the team and contribute to knowledge sharing among peers.

The hiring process for the Infrastructure Security Engineer position at Glean includes an initial screening interview followed by technical assessments to evaluate your skills and expertise in cloud security. You'll also participate in interviews with team members to assess your fit within the company's culture and collaboration style. Glean prioritizes a clear and engaging hiring process.

At Glean, you can expect a flexible and inclusive work environment where collaboration and creativity are highly valued. The company promotes a customer-centric approach, encouraging team members to take ownership of projects that have a significant impact. Enjoy a balance of company events, learning opportunities, and flexible time-off policies in a supportive atmosphere.

In my previous roles, I've emphasized the critical nature of cloud security by implementing best practices for data protection, access management, and incident response. Demonstrating how I proactively identified vulnerabilities and established robust security mechanisms showcases my keen understanding of potential risks and the measures required to mitigate them effectively.

My approach to identifying security vulnerabilities includes conducting regular audits and utilizing tools to analyze system logs, configurations, and network communications. I also stay updated on emerging threats and utilize frameworks like OWASP to guide my assessments, allowing me to propose effective remediation plans that enhance security.

I have significant experience with both AWS and Azure security services, including IAM for user access control, VPC security for network isolation, and monitoring tools like CloudTrail and Azure Security Center for incident detection. This hands-on experience allows me to tailor security measures to each platform's unique strengths effectively.

Implementing a zero-trust security model involves ensuring that no user or system is trusted by default, regardless of network location. I would start by segmenting access based on the principle of least privilege, utilizing identity and access management tools, and continuously monitoring access patterns to identify anomalies.

I once dealt with a situation involving a potential breach due to misconfigured security groups in AWS. Through rigorous investigation and collaboration with the engineering team, I identified the misconfigurations and modified the policies, fortifying our defenses and preventing any unauthorized access.

I am most proficient in Python and Go for security automation tasks. Using these languages, I have developed scripts for log analysis, automated security checks, and deployed essential security features that enhance our overall infrastructure security.

I prioritize continuous learning by subscribing to security newsletters, participating in webinars, and attending industry conferences. I also engage with online forums and communities focused on cybersecurity, which keeps me informed about emerging threats and innovative solutions.

I would follow a structured incident response plan, starting with containment to prevent further damage. This step would be followed by a thorough investigation to assess the impact, documenting the findings, and implementing appropriate remediation measures while communicating progress with stakeholders.

I utilize a combination of interactive workshops, simulations, and comprehensive documentation to train team members on security best practices. Engaging them with real-world scenarios enhances understanding and fosters a culture of security awareness within the organization.

The biggest challenge facing Infrastructure Security Engineers today is the ever-evolving threat landscape and the complexity of managing security across multi-cloud environments. The rapid pace of technological advancements requires constant vigilance and adaptation of security strategies to protect sensitive data effectively.