Sr. Infrastructure Security Engineer

Prosper Marketplace is a leading fintech company dedicated to advancing financial well-being. They are seeking a Senior Infrastructure Security Engineer to focus on cloud security, particularly within Google Cloud Platform (GCP), and to proactively prevent, detect, and respond to threats against their cloud-based infrastructure.

Responsibilities:

• Own cloud security across Google Cloud Platform (GCP) and Microsoft Azure, driving initiatives from design through execution
• Reduce real risk by operationalizing CNAPP tooling like Wiz - cutting noise, prioritizing high-impact issues, and ensuring remediation lands
• Embed security into infrastructure using Terraform and CI/CD, making controls scalable, consistent, and developer-friendly
• Lead vulnerability management end-to-end, from triage to remediation tracking, partnering with engineering to ship fixes quickly
• Strengthen data and endpoint security (DLP, EDR, identity, device posture) and reduce exposure across cloud environments
• Improve detection and response by building and tuning detections in Google Chronicle and supporting incident response
• Proactively identify and fix cloud misconfigurations (IAM, networking, firewalls, encryption) before they become incidents
• Define practical security standards and runbooks that engineers can easily adopt
• Act as a senior escalation point during security incidents, driving effective triage and resolution
• Leverage AI tools responsibly to accelerate code review, triage, and security analysis while maintaining strong security guardrails
• Mentor engineers and raise the overall security bar through collaboration and clear risk communication

Requirements:

• Strong hands-on experience securing cloud environments in GCP and/or Azure
• Deep understanding of cloud fundamentals: IAM, networking, logging, monitoring, and encryption
• Proven ability to identify real risk vs. noise using CNAPP tools like Wiz
• Experience with Terraform and security-as-code, including CI/CD integrations
• Solid vulnerability management experience, including prioritization and driving remediation with engineering teams
• Knowledge of data security (DLP, sensitive data discovery) and endpoint/identity platforms (Okta, MDM, Google Workspace)
• Experience with SIEM tools like Chronicle, including detection engineering and incident support
• Strong scripting/automation skills (e.g., Python) to reduce manual security work
• Comfortable owning projects end-to-end in a highly collaborative environment
• Strong familiarity with AI agents and tools, aligned with Prosper Tech's 'forward-thinking but safe' approach to AI adoption
• Understanding of common cloud attack paths and how security failures occur in real environments
• Strong collaboration and communication skills, with the ability to explain risk clearly and drive practical, scalable fixes across cross-functional teams