Software Engineer - Infrastructure & Product Security - 100% Remote

About the Company

Takumi Security is a specialized security consultancy that works with organizations ranging from early-stage startups to established global technology companies. Its experience spans industries such as online dating, entertainment, social networking, major technology platforms, and financial services.

The company provides fractional CISO and strategic advisory services, security program development, and support for PCI, SOX, and SOC 2 compliance. Its services also include security engineering, bug bounty program management, and security staff augmentation.

About the Role

Takumi Security is recruiting a Security Engineer for a client headquartered in San Francisco. This is a fully remote, hands-on engineering role focused on securing a cloud platform built on substantial Kubernetes infrastructure.

You will work across infrastructure and application security, protecting the systems that power the platform as well as the applications, APIs, and services used by customers. The role involves building security tooling, implementing preventative controls, developing effective detection capabilities, and partnering with engineering teams to identify and address security risks.

The client is particularly interested in engineers who have worked in rapidly growing technology companies and understand how to develop practical security practices as infrastructure, products, and teams evolve.

Key Responsibilities

• Design and build internal security tools, authentication services, proxies, and other mechanisms for secure access to infrastructure and sensitive resources.
• Identify and address security risks across cloud workloads, Kubernetes environments, containerized systems, control planes, service-to-service communication, and underlying platform infrastructure.
• Review architecture, code, APIs, and sensitive execution paths to identify vulnerabilities and implement lasting security improvements.
• Develop automated checks, monitoring, and detection systems that identify meaningful security issues while minimizing noise and operational overhead.
• Analyze findings from threat modeling, penetration testing, security scanning, and vulnerability disclosures.
• Assess vulnerability impact and exploitability, then work with engineers to prioritize and resolve security issues.
• Collaborate with engineering teams on secure architecture and design, provide practical security guidance, and integrate security practices into development workflows.
• Strengthen authentication, authorization, isolation, and auditability across internal systems, infrastructure, and customer-facing services.
• Investigate security incidents, coordinate technical responses, drive remediation, and apply lessons learned to prevent future issues.
• Work with product engineering teams to develop security capabilities that meet customer needs without compromising usability or platform performance.
• Engage with customers on security and compliance requirements.
• Communicate security risks and technical trade-offs to technical and non-technical stakeholders.
• Help prioritize investments in the company's overall security posture.

Required Qualifications

• Current US or Canadian work authorization. Visa transfers are supported, but new visa sponsorship is not available.
• 6+ years of professional experience in software engineering, security engineering, or a combination of both.
• Strong engineering fundamentals and experience designing, building, and maintaining secure production systems, tools, or APIs.
• Practical experience across application security and infrastructure or cloud security, with the ability to investigate issues across both areas.
• Experience assessing vulnerabilities, understanding exploitability and real-world impact, and managing issues through remediation.
• Strong understanding of authentication, authorization, least privilege, isolation boundaries, and secure system design.
• Ability to work independently, exercise sound technical judgment, and take ownership of security problems from discovery through resolution.
• Strong communication and collaboration skills, including the ability to explain security trade-offs to broader audiences.
• A pragmatic approach to security that reduces meaningful risk while maintaining engineering velocity and minimizing operational overhead.

Preferred Qualifications

• Experience securing cloud platforms, Kubernetes clusters, containerized workloads, distributed systems, or multi-tenant infrastructure.
• Experience working at a rapidly scaling technology company, particularly in developer infrastructure, cloud services, or SaaS.
• Experience with Go, TypeScript, Kubernetes, PostgreSQL, Terraform, or Temporal.
• Experience building detection engineering capabilities, operating a SIEM, or developing security automation and monitoring pipelines.
• Experience with incident response, security investigations, penetration testing, exploit development, or vulnerability research.
• Experience conducting threat modeling, reviewing system architecture, and assessing risks across complex services.
• Familiarity with SOC 2, ISO 27001, HIPAA, PCI DSS, or other security and compliance frameworks.
• Contributions to the security community through original research, responsible vulnerability disclosure, open-source projects, technical writing, or presentations.

Location and Work Arrangement

• Fully remote position. Some in-person company gatherings are expected. The client is headquartered in San Francisco.

Salary and Benefits

• Base salary: $170,000–$290,000 USD, plus equity.
• 4 weeks of paid vacation.
• 14 weeks of fully paid parental leave for all parents.
• Long-term disability, life insurance, and 401(k) plans.
• 100% employer-paid medical coverage and 99% employer-paid dental and vision coverage for employees and one dependent.
• Flexible Spending Accounts (FSAs) and Health Savings Accounts (HSAs).
• Monthly lifestyle stipend for wellness, mental health, therapy, hobbies, and related activities.
• Monthly cell phone and internet subsidy.
• Commuter benefits for employees in the San Francisco Bay Area.
• Home office stipends for remote employees.
• Continuous learning benefits and related support.