Skip to content

Security Engineering

Infrastructure Security Engineer

Dataflow Security logoDataflow SecurityRemote in Italy, South KoreaPosted 1mo ago

The full posting

We are looking to fill the position of an Infrastructure Security Engineer in our team.

Responsibilities

  • Designing and reviewing network architecture.
  • Hardening the CI/CD pipeline.
  • Reviewing and hardening the physical and virtual infrastructure.
  • Part of the information security team, will be closely working with the developers’ team to plan and implement security-related changes.

Requirements

  • Strong hands-on experience with Terraform and Ansible, with a security-first mindset.
  • Proven ability to review and harden Infrastructure-as-Code (identify misconfigurations, enforce least privilege, secure state management in the AWS-based infrastructure).
  • Familiarity with security configuration scanning tools (Checkov, Trivy etc.).
  • Practical experience securing CI/CD pipelines.
  • Experience designing or reviewing secure network flow architectures.
  • Solid understanding of AWS IAM models, secrets management and least-privilege design.
  • Good knowledge of Linux and its networking stack.
  • Blue team orientation, focus on defensive hardening.
  • Ability to work closely with dev teams to fix pipeline/infra issues without blocking delivery.
  • At least 5 years of proven work experience in mid or senior positions.

What we offer

  • Finance: Highly competitive compensation package.
  • Work Environment: Fully remote with flexible work schedule.
  • Wellness: We offer a prime wellness program designed to promote a healthy lifestyle, which includes, but not limited to access to gyms around the world, health coaching, and more.

For more information, please review our Recruitment Policy at https://dfsec.com/recruitment-policy-en

Where you can be based

This position is 100% remote and open to applicants based in Italy and South Korea.

Text as Dataflow Security published it; last compared with the original on 13 Nov 2026.

The application

Your details, then 1 question.

Keep these to handCV (optional)Cover letter (optional)X profile (optional)
  1. 1.
    Website / Git or other code repositoryShort answer · optional

Taken from Dataflow Security's application form as it stood on 13 Nov 2026.

The employer: Dataflow Security

Researches vulnerabilities and builds exploits for vetted government agencies, and is hiring researchers for Android, iOS, browser and web targets.

Pay and benefits: Research staff roles producing exploits and proof-of-concept code to the company's own quality standard.

Other security roles worth a look

A few links on CyberJobs.cc are referral links: when one leads to a hire, a sign-up or a purchase (a lab, a course or a tool marked Partner), the company behind it may pay CyberJobs.cc a fee. You pay nothing extra, and it never changes the salary an employer offers you or which roles the board lists. Roles from partners who pay us a fee rank a little higher in this list.

Let security teams come to you

Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.

Create my profile

Hear first when Dataflow Security posts a security role

We read Dataflow Security's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.

Infrastructure Security Engineer at Dataflow Security | CyberJobs.cc