Security Engineer, Cloud Infrastructure

Mercor's mission is to organize human intelligence to power the AI economy. You'll own cloud and infrastructure security at a company where tenant isolation is a critical enterprise requirement. Mercor's customers - including frontier AI labs - need hard guarantees that their data stays within strict boundaries. This is not a compliance checkbox role. You'll architect multi-account AWS isolation, harden Kubernetes clusters, deploy cloud security posture management, and build the infrastructure that lets Mercor serve enterprise clients who demand the highest security bar.

Responsibilities

Multi-account AWS tenant isolation architecture - dedicated accounts, SCPs, network boundaries, and data segregation for enterprise clients; Cloud security posture management using Wiz CSPM - continuous monitoring, misconfiguration detection, and automated remediation; Kubernetes security hardening - pod security standards, network policies, secrets management, and runtime protection; Infrastructure-as-code security guardrails - Terraform/CloudFormation policies that prevent insecure deployments before they reach production; IAM architecture and least-privilege access controls across AWS, Snowflake, and internal services; Incident response infrastructure - logging pipelines, forensic readiness, and blast radius containment

Requirements

Deep AWS security expertise - you've architected multi-account strategies, written SCPs, and hardened production environments; Experience with Kubernetes security in production - not just tutorials, you've secured real clusters running real workloads; Strong infrastructure-as-code skills - Terraform, CloudFormation, or Pulumi - you think in code, not console clicks; Experience with CSPM/CNAPP platforms (Wiz, Prisma Cloud, or similar) - deploying, tuning, and driving remediation; Understanding of network security at the cloud level - VPCs, security groups, transit gateways, PrivateLink; You've designed tenant isolation for multi-tenant SaaS - data segregation, compute isolation, network boundaries; 5+ years of professional experience in cloud security, infrastructure security, or platform/SRE engineering with a strong security focus

Nice to have

Experience with Snowflake security - schema-level isolation, access controls, data sharing governance; Familiarity with container runtime security (Falco, SentinelOne Cloud Workload Protection, or similar); Offensive cloud security skills - you've exploited misconfigurations and understand the attacker's perspective; Experience building compliance-ready infrastructure (SOC 2, ISO 27001, FedRAMP); You've handled cloud security incidents - forensics, containment, and root cause analysis in AWS; Contributions to open source infrastructure security tools

Benefits

Bi-annual performance bonus structure; Generous equity grant vested over 4 years; Up to $15k Relocation bonus; $10K housing bonus (if you live within 0.5 miles of our office); $1.5K monthly stipend for meals; Free Equinox membership; $200 monthly laundry reimbursement; $200 monthly personal wellness reimbursement; Health, Dental, Vision insurance