Lead Infrastructure Security Engineer

Hands-on security engineer at AngelList who reports to the Head of Security on a small team and owns the company's security foundations across AWS, identity, access control, authentication, authorization and secrets. The engineer designs guardrails built into infrastructure as code, CI/CD and developer workflows, builds least-privilege IAM covering employees, services and machine identities, with access reviews and privileged access, writes tooling that finds and fixes weaknesses automatically, using AI where it improves decisions, and contributes to application security through threat modelling and secure design.

AngelList wants seven or more years in security, cloud, infrastructure or identity engineering with deep AWS or GCP security and IAM, real software skills, and a record of driving adoption across teams. Hybrid, at least two office days a week, preferably San Francisco, possibly New York.