Staff Security Engineer, Infrastructure Security

Company Description
Etsy is the global marketplace for unique and creative goods. We build, power, and evolve the tools and technologies that connect millions of entrepreneurs with millions of buyers around the world. As an Etsy Inc. employee, whether a team member of Etsy, Reverb, or Depop, you will tackle unique, meaningful, and large-scale problems alongside passionate coworkers, all the while making a rewarding impact and Keeping Commerce Human.

Salary Range:

$201,000.00 - $235,000.00

What’s the role?

Etsy is seeking a Staff Security Engineer to join our Infrastructure Security team.

This role is a great opportunity to help shape the future of Etsy's infrastructure security program. As a leader on the team, you will play a key role in defining our roadmap and help us identify areas of improvement. This is a highly collaborative role, you’ll be working with our security operations team to help increase their visibility, and part of your time will be spent helping other members of the team grow their cloud security expertise.

This is a full-time position reporting to the Senior Engineering Manager, Application and Infrastructure Security. In addition to salary, you will also be eligible for an equity package, an annual performance bonus, and our competitive benefits that support you and your family as part of your total rewards package at Etsy. 

For this role, we are considering candidates based in the United States. Candidates living within commutable distance of Etsy’s Brooklyn Office Hub or in the San Francisco Bay Area may be the first to be considered. For candidates within commutable distance, Etsy requires in-office attendance once or twice
Per week depending on your proximity to the office. Etsy offers different work modes to meet the variety of needs and preferences of our team. Learn more details about our work modes and workplace safety policies here.

What’s this team like at Etsy?

As part of the larger Security and Privacy Engineering org, we secure the infrastructure that runs our production and corporate environments. We do this by creating and enforcing cloud security policies, by partnering with engineering teams with unique infrastructure needs, and by building and maintaining tools and services to help engineers deploy secure infrastructure by default.

What does the day-to-day look like?

• Mentor other team members as they grow their infrastructure security expertise

• Identify insecure patterns in our infrastructure and networks

• Help establish and implement infrastructure and network policies

• Design and develop services/tools/patterns to help development teams deploy infrastructure that is secure by default

• Guide teams to migrate their infrastructure to established secure patterns

• Collaborate with our security operations team to improve their awareness of our production environments

• Of course, this is just a sample of the kinds of work this role will require! You should assume that your role will encompass other tasks, too, and that your job duties and responsibilities may change from time to time at Etsy's discretion, or otherwise applicable with local law

Qualities that will help you thrive in this role are:

• Deep knowledge of at least one major cloud provider (GCP a plus)

• Strong networking foundations

• Experience architecting systems at scale

• Deep linux internals knowledge

• Expertise with infrastructure as code (Chef and Terraform a plus)

• Experience securing Kubernetes clusters and docker containers

• Experience with vulnerability scanning and software patching at scale

• Experience with software development (Golang a plus)

• Familiarity with PKI

Additional Information

What's Next
If you're interested in joining the team at Etsy, please share your resume with us and feel free to include a cover letter if you'd