Senior Staff Infrastructure & Security Engineer
Civilgrid · Boston
About this role
## About CivilGrid CivilGrid is the trusted civil design platform powering affordable infrastructure renewal and growth. We give utilities, civil engineers, and municipalities a single, collaborative source of truth for what’s underground—so teams can plan, design, and build faster, smarter, and safer. Our platform consolidates utility records, geotechnical and environmental data, moratoriums, and jurisdictional requirements from 3,000+ utilities, agencies, and municipalities, with full chain-of-custody documentation. ## Why this role We’re looking for a **Security & Infrastructure Engineer** to own our security posture and help support our cloud platform and reliability as we scale into large utilities and civil engineering firms. You’ll grow our security program while contributing across the Systems team (DevOps, SRE, and security). **Reports to:** Head of Engineering **Location:** Hybrid — Boston, MA office at least **3 days/week** ## What you’ll do - Partner with engineering to embed **reliability and security** into the SDLC and infrastructure decisions - Run our security program, including **SOC 2 readiness and audits**, vendor reviews, access controls, endpoint security, and threat modeling - Define and enforce policies for **identity, secrets, data handling, and production access** - Lead incident response for **security events** and some **reliability events** (detection → resolution → follow-up) - Harden and monitor our **GIS servers (Windows Server)** alongside our **AWS platform** - Build and maintain our **Trust Center**, and lead security reviews with customers - Contribute end-to-end in AWS: **VPC architecture, ECS, RDS, Secrets Manager, IAM, networking, and cost optimization** - Improve reliability practices: **SLOs, observability, alerting, on-call rotation, runbooks, and blameless post-incident reviews** **Tech you’ll work with:** AWS ECS, Postgres on RDS (CDK), GitHub, Datadog, Slack, Notion, Drata ## What you’ll bring - **5–8+ years** in product security, platform security, or security engineering, with hands-on experience in **DevOps or SRE** for production AWS infrastructure - Experience running/supporting a **SOC 2 program** (evidence collection, control design, auditor coordination) - Deep working knowledge of **AWS** (VPC, ECS, RDS, IAM, Secrets Manager, CloudWatch) and **infrastructure-as-code** (Terraform, CDK, or equivalent) - Experience running **vulnerability management** (scanner findings and external reports → fixes shipped) - Track record improving **reliability in production** (SLOs, observability, on-call, post-incident reviews) - Startup-ready: autonomous, fast-moving, takes initiative - Strong verbal and written communication ## Bonus points - Experience supporting **B2B products** sold into **regulated industries** (utilities, energy, public sector) ## Compensation & benefits - **Base salary range:** **$137,318 – $192,960** (final offer depends on experience, skills, level, and work location) - Meaningful early-stage equity - Company-funded medical, dental, and vision (medical at no cost to employee) - FSA (health and dependent care) - **Unlimited PTO** - 401(k) - Flexible, remote-friendly work environment ## Equal Employment Opportunity CivilGrid is an equal opportunity employer and is committed to an inclusive environment. *Note: Please mention the word **THINNER** and tag RMmEwNjo5OGMwOjM2MDA6OjEwMw== when applying to show you read the job post completely.*
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.