Senior Infrastructure Security Engineer

The opportunity

Unity is seeking a Senior Infrastructure Security Engineer to join our Security team to drive continuous improvement in security standards, policies, and Security Assessment (SA) for engineering changes. In this role, you will conduct design reviews, evaluate technical documentation, analyze questionnaire data and conduct threat modeling for critical systems. You’ll play a key role in ensuring infrastructure security standards are implemented and enforced throughout the organization. A strong ability to conduct risk analysis, file issues and track the risk findings is essential. This is an opportunity to make a meaningful impact and help shape the future of the Security team at Unity.

What you'll be doing

• Perform the security design reviews and conduct risk assessments for production instances
• Use threat modeling to improve identification of cybersecurity threats, prioritize them, and perform effective risk mitigation
• Perform the Projects / Products information security assessment and support infrastructure security Project efforts
• Deploy cloud security guardrails and configurations in Kubernetes, Microservices, AWS, GCP, and Azure environments
• Establish and implement security standards, policies, and best practices for Unity systems, ensuring secure configurations are deployed, maintained, and continuously improved

What we're looking for

• Proven record of mentoring teams and building a security process
• Through knowledge of Cloud computing environments such as GCP, AWS, Azure with knowledge for architectural reviews and experience with micro-services technologies such as Containers, Kubernetes, Hashicorp Vault
• Experienced in at least one scripting language (e.g., Python, Bash) for automations and security tool development
• Experience with Infrastructure as Code (IaC) tools, particularly Terraform
• Knowledge of security features and controls AuthN, AuthZ, PKI, Session Management, Logging
• Deep Understanding of network security fundamentals; the TCP/IP stack, Linux/Mac/Windows operating systems, DNS, Firewall, VPN, Email
• Knowledge of the NIST framework, PCI-DSS is preferred.

You might also have

• Strong understanding of incident response processes and forensic analysis in a cloud environment
• AI Security for protecting LLM, AI workloads, Agentic AI etc.
• Experience with advanced threat detection techniques
• Comfortable with ambiguity and bringing clarity to situations
• Strong critical thinking and interpersonal skills with the ability to communicate technical issues to a non-technical audience
• Passion for expanding your knowledge and a desire to grow beyond your current skill set