Security Engineer, Cloud Infrastructure

Навыки

• AWS
• Форензика и реагирование
• IAM / IDM
• ISO 27001 / PCI DSS
• Kubernetes
• Ответственность за результат
• Pulumi

О компании и продукте

• Mercor's mission is to organize human intelligence to power the AI economy. We're a leading AI data company, building the layer between human expertise and frontier models. Millions of domain experts on the platform are paid over $4 million per day to train frontier AI models. Mercor's APEX benchmark family measures AI's real-world impact on professional work. Mercor Enterprise brings this same infrastructure to Fortune 500 companies: helping companies capture how their best people actually work, translating that expertise directly back into agents.
• Mercor is creating a new category of work where expertise powers AI advancement. Achieving this requires an ambitious, fast-paced and deeply committed team. You’ll work alongside researchers, operators, and AI companies at the forefront of shaping the systems that are redefining society. Mercor is a profitable Series C company valued at $10 billion. We work in-person five days a week in our San Francisco, NYC, or London offices.
• You'll own cloud and infrastructure security at a company where tenant isolation is a critical enterprise requirement. Mercor's customers - including frontier AI labs - need hard guarantees that their data stays within strict boundaries. This is not a compliance checkbox role. You'll architect multi-account AWS isolation, harden Kubernetes clusters, deploy cloud security posture management, and build the infrastructure that lets Mercor serve enterprise clients who demand the highest security bar.

Задачи

• Multi-account AWS tenant isolation architecture - dedicated accounts, SCPs, network boundaries, and data segregation for enterprise clients
• Cloud security posture management using Wiz CSPM - continuous monitoring, misconfiguration detection, and automated remediation
• Kubernetes security hardening - pod security standards, network policies, secrets management, and runtime protection
• Infrastructure-as-code security guardrails - Terraform/CloudFormation policies that prevent insecure deployments before they reach production
• IAM architecture and least-privilege access controls across AWS, Snowflake, and internal services
• Incident response infrastructure - logging pipelines, forensic readiness, and blast radius containment

Требования

• Deep AWS security expertise - you've architected multi-account strategies, written SCPs, and hardened production environments
• Experience with Kubernetes security in production - not just tutorials, you've secured real clusters running real workloads
• Strong infrastructure-as-code skills - Terraform, CloudFormation, or Pulumi - you think in code, not console clicks
• Experience with CSPM/CNAPP platforms (Wiz, Prisma Cloud, or similar) - deploying, tuning, and driving remediation
• Understanding of network security at the cloud level - VPCs, security groups, transit gateways, PrivateLink
• You've designed tenant isolation for multi-tenant SaaS - data segregation, compute isolation, network boundaries
• 5+ years of professional experience in cloud security, infrastructure security, or platform/SRE engineering with a strong security focus

Будет плюсом

• Experience with Snowflake security - schema-level isolation, access controls, data sharing governance
• Familiarity with container runtime security (Falco, SentinelOne Cloud Workload Protection, or similar)
• Offensive cloud security skills - you've exploited misconfigurations and understand the attacker's perspective
• Experience building compliance-ready infrastructure (SOC 2, ISO 27001, FedRAMP)
• You've handled cloud security incidents - forensics, containment, and root cause analysis in AWS
• Contributions to open source infrastructure security tools
• WHY MERCOR
• The deliverable is concrete. Enterprise clients require tenant isolation as a baseline. You'll build infrastructure that directly enables the business
• AI-native infrastructure security
• You'll use frontier AI tools daily - for policy authoring, misconfiguration analysis, and anything that benefits from an AI co-pilot
• Ownership from day one. You'll own the entire cloud security domain - from AWS architecture to Kubernetes hardening to CSPM operations
• See the future early. Working alongside AI labs means you'll understand frontier model capabilities months before the market

Условия

• Bi-annual performance bonus structure
• Generous equity grant vested over 4 years
• Up to $15k Relocation bonus
• $10K housing bonus (if you live within 0.5 miles of our office)
• $1.5K monthly stipend for meals
• Free Equinox membership
• $200 monthly laundry reimbursement
• $200 monthly personal wellness reimbursement
• Health, Dental, Vision insurance

Паспорт вакансии

История публикации

Откуда что взялось

Отмечено то, что вывели мы. Без пометки — значение назвал работодатель.

Почему на этом месте в выдаче

Порядок выдачи объявлен контрактом: свежесть решает между днями, полнота и зарплата — внутри дня.