{"id":1492006,"url":"https://alion.io/job/castandcrewnews-infrastructure-security-engineer","title":"Infrastructure Security Engineer","company":{"id":1908178,"name":"CastAndCrewNews","domain":"castandcrew.com","url":"https://alion.io/company/castandcrew","size_band":"1-10","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":150000,"max":170000,"currency":"USD","period":"year","gross":null,"usd_annual":170000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Burp Suite","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"CVSS","optional":false},{"name":"DNS","optional":false},{"name":"EPSS","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"KEV","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"NIST CSF","optional":false},{"name":"Postman","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"TCP/IP","optional":false},{"name":"Amazon ECS","optional":true},{"name":"CI/CD","optional":true},{"name":"CloudFormation","optional":true},{"name":"Kubernetes","optional":true},{"name":"Shift-Left Security","optional":true},{"name":"SIEM","optional":true},{"name":"Terraform","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-09-28T00:00:00Z","employer_posted_date":"2026-09-28","last_verified_at":"2026-10-21T06:59:20Z","board_verified":true,"closed_at":null,"days_open":24,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":24},"description":"About Us\nAt Cast & Crew, we’ve empowered creativity and supported the global entertainment industry for decades. Together with our family of brands - Backstage, CAPS, Checks & Balances, Final Draft, Media Services, Sargent-Disc, and The TEAM Companies - we operate as a combined entertainment technology and services provider offering industry standard screenwriting accounting software, digital payroll products, data & reporting, and a host of creative tools. The industry continues to move faster than ever, and the need for our expertise, our technology, and our people has never been greater. We are a production’s best ally every step of the way. #OneCastOneCrew\nPosition Overview\nWe are looking for an Infrastructure Security Engineer to run the operational core of our offensive and vulnerability management programs. You will own the tooling that continuously tests our environment - bug bounty, agentic red team, CSPM, and vulnerability scanners - turn the output of those platforms into a prioritized, de-duplicated set of real issues, and drive them to verified closure with engineering and infrastructure teams. This is a hands-on, highly cross-functional role for someone who is as comfortable validating an exploit as they are chasing a fix to completion.\nWe are also looking for someone who is genuinely curious and learns fast. Our security stack changes quickly, and a meaningful part of this role is exploring, testing, and deploying emerging security products - including tooling built on the latest AI capabilities - evaluating whether they actually work in our environment, and putting the ones that do into production.\nCore Responsibilities\nBug Bounty Program\nOversee day-to-day operation of the bug bounty program, including program scope, policy, response targets, and researcher communications.\n\nTriage inbound submissions: reproduce and validate findings, de-duplicate against known issues, assign severity, and reject out-of-scope or invalid reports with clear rationale.\n\nMake and defend bounty award decisions in coordination with the platform provider and Security leadership.\n\nRoute confirmed findings to the owning engineering or infrastructure team, track them to closure, and verify fixes before the report is closed.\n\nUse recurring submission patterns to drive systemic fixes, scope adjustments, and secure-development feedback rather than one-off patches.\n\nVulnerability Scanning and Findings Triage\nManage and operate enterprise vulnerability scanners across cloud, on-premise, and hybrid assets, ensuring coverage of the full asset inventory and investigating scanning gaps.\n\nConfigure, tune, and maintain scan policies, credentialed scanning, authenticated checks, and scan schedules to maximize signal and minimize disruption.\n\nTriage and prioritize findings using exploitability, asset criticality, and business context (e.g., CVSS, EPSS, CISA KEV, threat intelligence).\n\nAssign findings to the correct engineering and infrastructure owners, negotiate remediation timelines, and verify remediation through re-scan or manual validation.\n\nTrack remediation against SLAs, escalate aging findings, and manage the exception and risk-acceptance process with the GRC team.\n\nProduce metrics and reporting on coverage, backlog, mean time to remediate, and SLA compliance for engineering and executive audiences.\n\nMonitor emerging CVEs, assess applicability to our environment, and coordinate emergency patching when critical vulnerabilities arise.\n\nCloud Security Posture Management (CSPM)\nManage and operate the CSPM platform across our multi-cloud environment, including onboarding new accounts, subscriptions, and projects.\n\nTune policies and baselines, suppress noise, and maintain exception handling so that surfaced findings are consistently actionable.\n\nDrive remediation of misconfigurations with cloud and platform owners, and verify that fixes hold over time.\n\nEnforce least-privilege access principles and audit cloud permissions, IAM policies, security groups, SCPs, and guardrails on a recurring basis.\n\nSupport secure architecture reviews for new cloud infrastructure and services.\n\nAgentic Red Team and Continuous Penetration Testing Platform\nManage and operate the agentic red-team pentesting platform, including target scoping, scheduling, credentials, and environment onboarding.\n\nDefine and enforce rules of engagement and safety guardrails so that automated testing does not disrupt production systems.\n\nValidate platform output, eliminate false positives, and translate confirmed attack paths into concrete, owner-assigned remediation items.\n\nFeed results into the same triage, prioritization, and verification workflow used for scanner and bug bounty findings so there is one prioritized view of risk.\n\nCoordinate with third-party penetration testers and use platform coverage to focus manual testing where it adds the most value.\n\nSecurity Tooling Evaluation and Adoption\nResearch, pilot, and benchmark emerging security products, including AI-driven and agentic tooling, against real problems in our environment rather than vendor demos.\n\nRun structured proofs of concept: define success criteria up front, test against known findings, and make a clear recommendation to adopt, defer, or reject.\n\nDeploy and integrate selected tooling into existing workflows and ticketing, and own it operationally once it is in production.\n\nAutomate repetitive triage, enrichment, and reporting work so that engineering time goes to remediation rather than data handling.\n\nNetwork and Perimeter Security\nSupport enterprise network security infrastructure including firewalls, IDS/IPS, proxies, VPNs, and DDoS mitigation.\n\nPerform firewall rule reviews and access control audits to reduce attack surface.\n\nInvestigate anomalous network activity surfaced by security tooling and escalate to incident response as needed.\n\nKey Qualifications\n5+ years of experience in infrastructure, network, or cloud security roles.\n\nExperience running or supporting an enterprise vulnerability management program end-to-end, from scanner operation through verified remediation.\n\nDemonstrated ability to triage security findings: reproduce issues, judge real-world exploitability, de-duplicate, and prioritize against business context rather than raw severity scores.\n\nDeep, practical understanding of common vulnerability classes and how they are actually exploited - remote code execution, injection, cross-site scripting, SSRF, insecure deserialization, authentication and authorization bypasses, and denial-of-service and DDoS techniques - sufficient to assess real exploitability rather than defer to a scanner score.\n\nHands-on proficiency with security testing tooling, including Burp Suite for web application testing and Postman for API testing, along with comparable intercepting proxies and fuzzing tools.\n\nWorking coding ability, primarily Python and shell scripting, sufficient to automate triage and reporting, parse and enrich findings, build integrations between security platforms, and write or adapt proof-of-concept code to validate a finding.\n\nHands-on experience securing at least one major cloud platform (AWS, Azure, or GCP), including operating or responding to CSPM tooling.\n\nSolid understanding of network protocols (TCP/IP, DNS, TLS) and perimeter security technologies.\n\nFamiliarity with security frameworks and standards (NIST CSF, CIS Benchmarks, ISO 27001) and the ability to translate control requirements into actionable technical configurations, including gathering, maintaining, and presenting evidence to support audit and assessment activities.\n\nStrong written and verbal communication skills, with the ability to translate technical risk for non-technical stakeholders and to hold remediation owners accountable without escalating every disagreement.\n\nDemonstrated curiosity and speed of learning: a track record of picking up unfamiliar tooling, evaluating new security products, and getting them into production use without extensive hand-holding.\n\nInterest in applying emerging AI capabilities to security operations, and the judgment to distinguish tooling that meaningfully reduces risk from tooling that only adds noise.\n\nPreferred Qualifications\nExperience operating or triaging a public or private bug bounty program on a platform such as HackerOne, Bugcrowd, or Intigriti.\n\nOffensive security experience: penetration testing, exploit validation, or red-team operations, including familiarity with automated or agentic testing platforms.\n\nExperience with infrastructure-as-code security (Terraform, CloudFormation) and shift-left security practices.\n\nExperience securing containerized workloads, including image hardening, registry security, runtime protection, and familiarity with orchestration platforms such as Kubernetes or ECS.\n\nExperience developing security automation or internal tooling beyond scripting, including work with security platform APIs and CI/CD integrations.\n\nExposure to SIEM/SOAR platforms and security telemetry pipelines.\n\nFamiliarity with zero trust network architecture (ZTNA) and micro-segmentation.\n\nRelevant certifications: AWS Security Specialty, CCSP, CISSP, OSCP, CompTIA Security+, or equivalent.\n\nSpecial Work Conditions\nSedentary- Exerts up to 30 lbs. of force occasionally and/or a negligible amount of force frequently or constantly lift, carry, push, or pull. Involves sitting most of the time but may involve walking or standing for brief periods of time.\n\nWe take care of our people. \nWhen you join Cast & Crew, you're backed by a benefits package built around what matters most. From comprehensive medical, dental, and vision coverage, to a 401(k) match, generous PTO, paid parental leave, health and wellness programs, tuition reimbursement, and employee discounts. We’re committed to helping you thrive, professionally, and personally.\nBenefits are subject to eligibility requirements.\nCast & Crew is an equal opportunity employer committed to hiring a diverse workforce and sustaining an inclusive culture. It is our policy to provide equal employment opportunities to all individuals based on job-related qualifications and ability to perform a job, without regard to age, gender, gender identity, sexual orientation, race, color, religion, creed, national origin, disability, genetic information, veteran status, citizenship or marital status, and to maintain a non-discriminatory environment free from intimidation, harassment or bias based upon these grounds.\nCA residents\nYour personal information may be collected in connection with certain services provided by Cast & Crew or its affiliated companies. A summary of your California privacy rights can be found at: https://www.castandcrew.com/privacy-policy/\nCompensation is commensurate with various factors including, but not limited to, relevant experience, qualifications, skills, training, licensure, certifications, geographic cost of labor, and other business and organizational needs. Compensation range for candidates in other locations may differ based on the cost of labor in that location. The compensation range for this position is: $150,000.00 - $170,000.00 per year.","description_format":"text","description_chars":11152,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Parental leave","Wellness"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Media & Entertainment","Professional Services","Corporate Events","Human Resources"],"lifecycle":[{"event":"open","at":"2026-09-30T00:54:51Z"}],"visa":[],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":1,"p_active":0.298,"p_room":0.35,"age_days":24,"expected_fill_days":12,"reasons":["conf:23","win:tail"],"computed_at":"2026-10-22T06:10:10Z"},"pay":{"stated_usd_annual":170000,"is_top_pay":true},"html_url":"https://alion.io/job/castandcrewnews-infrastructure-security-engineer","json_url":"https://alion.io/job/castandcrewnews-infrastructure-security-engineer.json","meta":{"generated_at":"2026-10-22T07:02:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2354,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1908178},"rest":"https://alion.io/mcp/rest/get_company?id=1908178"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcastandcrewnews-infrastructure-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcastandcrewnews-infrastructure-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcastandcrewnews-infrastructure-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/castandcrewnews-infrastructure-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcastandcrewnews-infrastructure-security-engineer"}]}