Pointone
Security & Infrastructure Engineer
New York City · Senior
Sponsorship not specifiedDetected 141 days ago
AWSTerraformCybersecurityIncident Response
About the role
- PointOne builds infrastructure for the legal industry, powering timekeeping and billing systems used by law firms and government agencies.
- We build and operate systems that process the most confidential data for institutions working on the most sensitive matters. Security for us is a strategic priority.
Responsibilities
- PointOne builds infrastructure for the legal industry, powering timekeeping and billing systems used by law firms and government agencies.
- We build and operate systems that process the most confidential data for institutions working on the most sensitive matters.
- We're hiring a senior engineer to own the security, scalability, and cost efficiency of our AWS environment.
- Drive principled tradeoffs between isolation, performance, and cost
- Raise the engineering bar on secure system design
- Build infrastructure that enterprise and government customers can trust
Requirements
- 5+ years operating AWS infrastructure in production
- Deep IAM expertise (roles, policies, trust relationships, STS)
- Experience designing multi-account AWS environments
- Strong understanding of cloud attack vectors and privilege escalation
- Experience reducing cloud cost without compromising security
- The compensation for this position is determined by multiple factors, including prior experience and expertise.
Nice to have
- Experience in legal, fintech, government, or other high-sensitivity environments.
- Strong plus: Experience in legal, fintech, government, or other high-sensitivity environments.
Skills
- Not a GRC or paperwork-heavy compliance role
- Not a vulnerability-scanning-only position
- Not a "turn on GuardDuty and call it done" role
- Design and enforce least-privilege IAM across services
- Implement permission boundaries and SCP strategy
- Reduce attack surface across networking and service exposure
- Improve secrets management and KMS key segmentation
- Lead threat modeling across core systems
- Design blast-radius containment strategies
- Strengthen logging, monitoring, and anomaly detection
- Ensure logs are immutable and auditable
- Build and test incident response playbooks
Compensation
- The compensation for this position is determined by multiple factors, including prior experience and expertise.
Benefits
- include comprehensive health, dental, and vision insurance, as well as meals in office, regular team events, and more!
Company info
- A security breach at PointOne would have consequences extending far beyond the survival of our company.
Apply directly at Pointone →Create a free account for alerts like thisView Pointone immigration profile
This listing is sourced directly from Pointone's careers page and normalized into a canonical job model.