Mid-level Infrastructure Vulnerability Management Engineer role focused on continuous cloud and workload scanning, CSPM/KSPM/DSPM ownership, IaC security in CI/CD, container and VM scanning, compliance-driven tracking (SOC 2, ISO 27001, PCI-DSS), and incident response support. Role is full-time based in Foster City, CA with in-office requirement Monday, Wednesday, and Friday.

Role to steward a polyglot codebase (TypeScript monorepo, Go services, npm packages, Nix), own and optimize build/test pipelines, drive code generation and type-safe interfaces, set code quality standards via linters/formatters, streamline developer onboarding, partner with platform and AI teams, and manage internal and external dependencies and open-source interactions. Full-time, Foster City, CA office with hybrid in-office requirement.

Build single-tenant and dedicated deployment options, private networking (VPC peering, static IPs), authorization services, BYOK/CMEK and data residency controls, and Terraform automation. Requires 4+ years in infrastructure/platform engineering, strong programming in Go/TypeScript/Python, production Kubernetes and cloud networking experience, and familiarity with auth/authorization and encryption fundamentals.