Staff Infrastructure Security Engineer

About Nclusion

Nclusion is on a mission to provide traditional financial services to 1.5 billion people worldwide without access today. Without a secure way to save, invest, or transfer money, individuals are not empowered to accumulate short or long-term wealth. We're changing that by bridging the gap between traditional banking and the communities that need it most.

About the Role

As our Staff Infrastructure Security Engineer, you'll architect and build the security platform that protects our cloud environments, developer ecosystem, and production systems as we scale. This is a deeply hands-on engineering role. You'll spend the majority of your time designing, implementing, and operating security-critical systems. You'll bring technical leadership to infrastructure and engineering teams, and help define how security gets built at Nclusion from the ground up. The right candidate brings serious depth in distributed systems and cloud infrastructure, writes production-quality code, and has built security controls in a regulated environment.

This role is based in our Palo Alto office. We work together onsite Monday through Thursday and remotely on Fridays.

What You’ll do

• Build security systems and tooling for audit logging, monitoring, threat detection, alerting, access controls, and incident investigation.
• Design and implement cloud security controls across AWS, Azure, or GCP, with automation for compliance validation, infrastructure governance, and security guardrails.
• Own secrets management, service identity, workload isolation, and secure communications across our infrastructure
• Embed security directly into CI/CD pipelines through tooling for code scanning, dependency analysis, and deployment enforcement.
• Write production-quality, maintainable, and testable code across services, APIs, and automation systems.
• Lead technical design on large-scale security initiatives, from architecture through deployment.
• Help improve our incident response and business continuity practices, including playbooks, tabletop exercises, investigation tooling, and lessons learned from incidents.

What You Bring to the Table

• 10+ years in Software Engineering, Platform Engineering, Infrastructure, DevOps, SRE, or Security Engineering, with a track record of leading major technical initiatives and system designs
• Strong programming skills in Python, Go, Java, or similar, with hands-on experience building and operating production services, APIs, and distributed systems at scale
• Deep experience with AWS, Azure, or GCP, including Kubernetes, containers, cloud-native architectures, and Infrastructure-as-Code tools like Terraform
• Experience building security-focused systems or platforms, with solid understanding of cloud security, secrets management, secure software delivery, and security monitoring
• Familiarity with IAM, MFA, logging, and audit systems (nice to have)

Benefits and Perks

• 📈 401k with a match!
• 🩺 Medical Insurance
• 🦷 Dental Insurance
• 👓 Vision Insurance
• 💸 Competitive compensation & equity – We believe in sharing success.
• ✈️ Flexible PTO – We focus on impact, not tracking vacation days. We encourage a minimum of 14 days.
• 🍽️ In-office lunch, team events & culture

Compensation

The base pay range for this role is $220,000 – $270,000 per year.

In our commitment to fostering a diverse and inclusive workplace, we value the unique perspectives and experiences each individual brings to our team. We encourage all candidates, regardless of background, to apply. Your skills, talents, and potential contributions matter deeply to us, and we believe in creating an environment where everyone has an opportunity to thrive. We recognize that meeting every listed requirement may not always be possible, but we value passion, determination, and a willingness to learn. Your application is an opportunity for us to discover the exceptional qualities you bring.