Senior EngineerPointOne builds infrastructure for the legal industry, powering timekeeping and billing systems used by law firms and government agencies. We build and operate systems that process the most confidential data for institutions working on the most sensitive matters. Security for us is a strategic priority. We're hiring a senior engineer to own the security, scalability, and cost efficiency of our AWS environment.The RoleLet's start with what this isn't:Not a GRC or paperwork-heavy compliance roleNot a vulnerability-scanning-only positionNot a "turn on GuardDuty and call it done" roleYou will be shaping critical systems and making architectural decisions that materially affect risk and resilience. This is a hands-on engineering role at the intersection of security, cloud architecture, and platform optimization. You will harden our AWS infrastructure, reduce blast radius, eliminate unnecessary exposure, and ensure our systems scale efficiently and securely.What You'll OwnInfrastructure SecurityDesign and enforce least-privilege IAM across servicesImplement permission boundaries and SCP strategyReduce attack surface across networking and service exposureImprove secrets management and KMS key segmentationLead threat modeling across core systemsDesign blast-radius containment strategiesDetection & ResponseStrengthen logging, monitoring, and anomaly detectionEnsure logs are immutable and auditableBuild and test incident response playbooksReview new infrastructure designs for security risksScale & CostOptimize AWS architecture for reliability and efficiencyImprove Lambda/SQS concurrency and scaling patternsEvaluate and improve RDS scaling strategyDrive principled tradeoffs between isolation, performance, and costWhat We're Looking For5+ years operating AWS infrastructure in productionDeep IAM expertise (roles, policies, trust relationships, STS)Strong AWS networking knowledge (VPC, PrivateLink, Security Groups)Experience designing multi-account AWS environmentsHands-on experience responding to real security incidentsStrong understanding of cloud attack vectors and privilege escalationExperience reducing cloud cost without compromising securityComfortable working directly in CDK/Terraform and reviewing infrastructure codeStrong plus: Experience in legal, fintech, government, or other high-sensitivity environments.Why This Role MattersA security breach at PointOne would have consequences extending far beyond the survival of our company. This role exists to:Protect sensitive institutionsRaise the engineering bar on secure system designBuild infrastructure that enterprise and government customers can trustYou will be a core architect of PointOne's long-term security posture. This is intense early-stage startup work. You will be expected to take ownership, bring structure to ambiguity, and build the connective tissue between our customers and our product.The compensation for this position is determined by multiple factors, including prior experience and expertise. A competitive equity component will also be offered as part of the package.
Benefits include comprehensive health, dental, and vision insurance, as well as meals in office, regular team events, and more!