Infrastructure & Product Security Engineer

Company Description Takumi Security is a specialized security consultancy whose team has worked with organizations ranging from early-stage startups to well-known global technology brands. The company has experience across diverse industries, including online dating, entertainment, social networking, major tech platforms, and financial institutions. Takumi Security provides services such as fractional CISO and strategic advisory, security program bootstrapping, and assistance with PCI, SOX, and SOC 2 compliance. The team also delivers security engineering, bug bounty program management, and security staff augmentation to help clients scale their security capabilities effectively. This remote role is with one of our amazing clients whose HQ is in the heart of San Francisco.

Role Description

Our client is looking for a Security Engineer who combines strong infrastructure and application security skills. You’ll help secure a cloud platform built on substantial Kubernetes infrastructure, working across the systems that power the platform and the applications, APIs, and services that expose it to customers.

This is a hands-on engineering role. You’ll build security tooling, design and implement preventative controls, develop high-signal detection capabilities, and partner with engineering teams to identify and address security risks. You’ll have the opportunity to shape how security evolves as the platform and company scale.

We’re particularly interested in engineers who have worked at rapidly growing technology companies and understand how to build effective security practices in environments where infrastructure, products, and engineering teams evolve quickly.

In this role you will:

• Build security tooling and infrastructure. Design and implement internal tools, authentication services, proxies, and other mechanisms that enable secure, efficient access to infrastructure and sensitive resources.
• Secure cloud and Kubernetes infrastructure. Identify and address risks across cloud workloads, containerized environments, control planes, service-to-service communication, and the underlying systems that operate the platform.
• Improve application and platform security. Review architecture, code, APIs, and sensitive execution paths to identify vulnerabilities and implement practical, durable security improvements.
• Build detection and prevention capabilities. Develop automated checks, monitoring, and detection systems that surface high-signal security issues while minimizing noise and unnecessary operational overhead.
• Lead vulnerability assessment and remediation. Analyze findings from threat modeling, penetration testing, security scanning, and vulnerability disclosures; assess their real-world impact and work with engineers to prioritize and resolve them.
• Partner with engineering teams. Collaborate on secure architecture and design, provide actionable guidance on security best practices, and help engineers incorporate security into their development workflows.
• Strengthen identity and access controls. Ensure that authentication, authorization, isolation, and auditability are appropriately implemented across internal systems, infrastructure, and customer-facing services.
• Respond to security incidents. Investigate security issues, coordinate technical response, drive remediation, and translate lessons learned into lasting improvements.
• Influence product security. Work with product engineering to design and implement security capabilities that meet customer needs without compromising usability or platform performance.
• Inform security strategy. Engage with customers on security and compliance requirements, communicate risks and trade-offs to technical and non-technical stakeholders, and help prioritize investments in the company’s security posture.

Qualifications

• Current US or Canadian work authorization (visa transfers supported, but not new visa sponsorship)
• 6+ years of professional experience in software engineering, security engineering, or a combination of both.
• Strong engineering fundamentals and experience designing, building, and maintaining secure production systems, tools, or APIs.
• Practical experience across application security and infrastructure or cloud security, with the ability to investigate issues spanning both layers.
• Experience assessing vulnerabilities, understanding exploitability and real-world i…