Security & Infrastructure Engineer
Hybrid (New York, NY)$180k - $230kFull-timePosted 6mo ago
About the role
Hands-on security-focused engineering role at PointOne, shaping critical cloud infrastructure, security practices, and platform resiliency for an AWS-based environment in a fast-growing legal-tech startup.
Responsibilities
- Design and enforce least-privilege IAM across services
- Implement permission boundaries and SCP strategy
- Reduce attack surface across networking and service exposure
- Improve secrets management and KMS key segmentation
- Lead threat modeling across core systems
- Design blast-radius containment strategies
- Strengthen logging, monitoring, and anomaly detection
- Ensure logs are immutable and auditable
- Build and test incident response playbooks
- Review new infrastructure designs for security risks
- Optimize AWS architecture for reliability and efficiency
- Improve Lambda/SQS concurrency and scaling patterns
- Evaluate and improve RDS scaling strategy
- Drive principled tradeoffs between isolation, performance, and cost
Qualifications
- 5+ years operating AWS infrastructure in production
- Deep IAM expertise (roles, policies, trust relationships, STS)
- Strong AWS networking knowledge (VPC, PrivateLink, Security Groups)
- Experience designing multi-account AWS environments
- Hands-on experience responding to real security incidents
- Strong understanding of cloud attack vectors and privilege escalation
- Experience reducing cloud cost without compromising security
- Comfortable working directly in CDK/Terraform and reviewing infrastructure code
Skills
Required:AWSIAM (roles, policies, trust relationships, STS)Networking (VPC, PrivateLink, Security Groups)Multi-account AWS environmentsIncident response
Benefits
- comprehensive health, dental, and vision insurance
- meals in office
- regular team events
Last updated Sep 16, 2026. Interested? Apply on the company site.
About PointOne
Automated time tracking and billing for law firms.
Lawyers have to manually track all their client work in 6-minute increments. PointOne uses AI to completely automate time tracking and bill review, helping law firms collect more revenue and saving lawyers hours each week.
artificial-intelligencesaasb2blegal
More open roles at PointOne
- New Grad Software Engineer6mo agoNew York, NY · Engineering
- GTM Engineer6mo agoHybrid (New York, NY) · Engineering
- Customer Success Lead6mo agoHybrid (New York, NY) · Operations
- Product Reliability Engineer6mo agoNew York, NY · Engineering
- Forward Deployed Engineer6mo agoNew York, NY, US · Engineering