Confidence can sometimes hold us back from applying for a job. Here's a secret: there's no such thing as a perfect candidate. Poshmark is looking for exceptional people who want to make a positive impact through their work and help create an organization where everyone can thrive. So whatever background you bring with you, please apply if this role would make you excited to come to work every day.
Senior Security Engineer - Infrastructure SecurityPoshmark Chennai, Tamil Nadu, India (On-site)SaveApplySecurity team at Poshmark is responsible for securing our application platform, cloud infrastructure, and IT systems to protect Poshmark and its 60 million Community members. As a AWS and Infrastructure Security Engineer, you will collaborate with other security team members and other stakeholders to design and harden infrastructure, network and access implementing security best practices.
Responsibilities
- Design, implement and maintain secure AWS architecture aligned with industry standards, security best practices and CIS benchmarks.
- Harden corporate IT and SaaS applications (Okta, CrowdStrike, Jamf, etc.) through security best practices and layered defense.
- Develop and maintain cloud and infrastructure security reference architectures, and policies.
- Continuously assess and manage vulnerabilities across cloud, infrastructure, and endpoint systems.
- Conduct regular security gap analyses, security reviews, risk assessments, and drive remediation with system owners.
- Integrate infrastructure security into CI/CD pipelines and change management processes.
- Architect and enforce cloud and enterprise IAM controls with Okta and AWS IAM, focusing on least privilege, SSO, and federation.
- Strengthen endpoint and server protection through configuration management and continuous monitoring.
- Partner with Engineering, DevOps, SRE, IT, and Compliance teams to ensure security requirements are embedded throughout the infrastructure lifecycle.
- Help with incident response activities across AWS and corporate environments including detection, investigation, containment, eradication, and recovery.
- Mentor junior engineers and contribute to a culture of proactive, engineering-driven security.
Requirements
- 5+ years of professional experience in Security Engineering, with at least 3+ years focused on AWS Cloud Security or any other public cloud.
- Demonstrated experience in Enterprise Security technologies (e.g., Okta, CrowdStrike, JAMF, SSO, and related tools).
- Strong hands-on experience with AWS security services: IAM, WAF,Advanced Shield, GuardDuty, CloudTrail, Macie, Config, Organizations, and Network Firewall, DNS Firewall etc
- Solid understanding of network security, segmentation, and zero-trust principles.
- Familiarity with security frameworks and standards (CIS, NIST, ISO 27001, OWASP).
- Excellent written and verbal communication skills. Ability to work cross-functionally and influence without authority.
- Strong sense of ownership, accountability, and continuous improvement mindset.
- Preferred Certifications: AWS Certified Security Specialty, Certified Cloud Security Professional (CCSP) or similar.
- Bonus: Experience building and deploying security controls and detection mechanisms as code using Terraform, Python, or similar automation frameworks.
Poshmark is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.
View Poshmark's Job Applicant Privacy Policy here.
