{"id":832653,"url":"https://alion.io/job/liberate-lead-security-and-infra-engineer","title":"Lead Security and Infra Engineer","company":{"id":678753,"name":"Liberate","domain":"liberate.com","url":"https://alion.io/company/liberate-2","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"C","score":63,"open_postings":16,"ghost_share":0.625,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-21T05:46:15Z"}},"role":"DevOps","role_family":"DevOps","seniority":"lead","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Berkeley, United States","Boston, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":180000,"max":240000,"currency":"USD","period":"year","gross":null,"usd_annual":240000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Amazon EKS","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Function Calling","optional":false},{"name":"Go","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false}],"status":"live","first_seen_at":"2026-08-12T21:09:13Z","employer_posted_date":"2026-08-12","last_verified_at":"2026-10-21T12:43:30Z","board_verified":true,"closed_at":null,"days_open":69,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":69},"description":"About Us:\nLiberate builds AI agents to automate manual tasks for the $2.7T insurance industry. We started with voice - the hardest and most valuable channel in insurance - and are now expanding into full workflow automation across sales, servicing, and claims. Our long-term vision is to build reasoning agents capable of handling the entire spectrum of insurance carrier and broker operations. We've raised $72M to date, including a $50M Series B in October 2025, backed by top-tier venture firms.\nLocation: Boston or Bay Area, hybrid preferred (2x/week in office)\nReporting: VP Engineering, dotted line partnership with CPO, and Customer Success leadership\nMission\nBuild the secure, reliable infrastructure foundation for Liberate’s agentic platform. You will be a hands-on owner of cloud infrastructure and DevOps while serving as Liberate’s senior technical owner and primary point of contact for product security, cloud security, and compliance.\nMake the safest path the fastest path so engineers can ship quickly without normal mistakes becoming outages, security incidents, or compliance failures.\nAbout the role\nThis is intentionally an infrastructure-heavy security role. You will spend most of your time building and operating production cloud infrastructure, deployment systems, and developer tooling while owning security across the product and platform.\nThis is not a governance-only CISO role or a corporate IT/help desk role. As Liberate’s first dedicated security engineering leader, you will define the function, use vendors where they create leverage, and have the opportunity to build the team as the company scales.\nWhat you will do\nCloud infrastructure and DevOps\nOwn and evolve Liberate’s production cloud foundation across AWS, Kubernetes/EKS, networking, compute, storage, data services, environment isolation, and production access.\nBuild reusable Terraform modules, CI/CD pipelines, deployment automation, configuration standards, and self-service paths that make environments repeatable and safe.\nImprove reliability and operability through observability, alerting, SLOs, capacity and cost management, backup and recovery, disaster recovery, and production-readiness standards.\nParticipate in the engineering on-call model, lead infrastructure incidents when needed, and convert incidents and operational toil into durable platform improvements.\nPartner with Platform and product engineering teams on architecture and rollout patterns, reducing manual work and broad privileges through automation and secure defaults.\nSecurity engineering and architecture\nServe as Liberate’s senior technical security owner and escalation point, leading threat modeling and secure design reviews for agent capabilities, tool execution, memory, integrations, multi-tenant services, and sensitive data flows.\nBuild a secure SDLC engineers actually follow, including requirements, code, dependency, container, and infrastructure-as-code scanning, CI gates, security tests, and paved-road defaults.\nOwn identity, authorization, secrets, key management, encryption, network boundaries, audit trails, production access, and tenant and data-isolation patterns.\nEstablish practical controls for agentic AI risks, including scoped tool access, credential handling, data exfiltration, prompt injection, model and vendor risk, and traceable actions.\nRun vulnerability management end to end, including prioritization, remediation, penetration tests, and third-party reviews.\nBuild useful security telemetry, detection, playbooks, and tabletop exercises, then lead calm, accountable response and durable follow-through when incidents occur.\nCompliance and customer trust\nOwn SOC 2 and related compliance programs end to end: control design, technical implementation, evidence quality, audit readiness, and continuous effectiveness.\nTranslate compliance requirements into automated technical controls and operational practices rather than manual checklists.\nLead audits, penetration tests, customer security reviews, questionnaires, and technical conversations with enterprise customers, partners, and auditors.\nMaintain a clear risk and security roadmap, frame tradeoffs in business terms, and drive concrete mitigations with accountable owners.\nUse tools such as Vanta, security vendors, and external specialists as leverage while retaining internal technical ownership.\nWhat we are looking for\nYou are a senior infrastructure, platform, or DevOps engineer with real security depth, or a security engineer who has personally built and operated production cloud infrastructure.\nYou write code and infrastructure as code, debug production systems, review architecture, and take changes from design through rollout and operation.\nYou think in systems: identity, authorization, tenant boundaries, failure domains, blast radius, recovery, and the incentives that make secure behavior the default.\nYou are pragmatic about when to build, buy, automate, delegate, or accept risk, and you right-size controls to the stage of the company.\nYou lead through influence without becoming a gatekeeper or creating a separate security lane.\nYou are a calm incident operator and a crisp communicator with engineers, executives, customers, auditors, and vendors, and you are energized by building a function from the ground up.\nExperience\n8+ years across infrastructure engineering, platform engineering, SRE, DevOps, cloud security, or security engineering.\n4+ years with meaningful ownership of security architecture or security programs for a production SaaS platform.\nDeep hands-on experience with AWS, Kubernetes/EKS, Terraform or equivalent infrastructure as code, CI/CD, observability, and production incident response.\nStrong working knowledge of IAM, network security, secrets and key management, vulnerability management, secure software delivery, and multi-tenant cloud architecture.\nDemonstrated ownership of SOC 2 or a comparable compliance program in a fast-moving environment.\nProficiency in a programming or automation language such as Python, Go, or TypeScript, plus experience in an early-stage or high-growth company where systems had to be built, not inherited.\nHelpful, not required\nExperience securing LLM-based or agentic systems, including tool use, model integrations, prompt injection, or data-leakage risks.\nExperience in insurance, financial services, healthcare, or another regulated industry.\nExperience designing disaster recovery, multi-account cloud foundations, regional or tenant-isolation strategies, or managing security and incident-response vendors.\nSuccess looks like\nProduction infrastructure is reliable, observable, recoverable, and increasingly defined and enforced through code.\nEngineers ship faster through safe, self-service paths rather than ticket queues, one-off access, or manual deployment work.\nBroad access, secrets exposure, tenant-boundary risk, and preventable security failures are materially reduced. When issues occur, blast radius is smaller and response is faster.\nSOC 2 and customer security work run predictably with strong evidence and minimal fire drills.\nLiberate has one trusted technical owner for security, clear expectations embedded in architecture and CI/CD, and a function that can scale with the business.\nCompensation: \nBoston; $180,000-$240,000 + equity\nSan Francisco; $190,000 - $250,000 + equity","description_format":"text","description_chars":7355,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["AI Agents","InsurTech"],"lifecycle":[{"event":"open","at":"2026-09-12T17:14:26Z"}],"visa":[],"liveness":{"score":7,"band":"cold","label":"Long shot","p_open":1,"p_active":0.238,"p_room":0.28,"age_days":69,"expected_fill_days":27,"reasons":["conf:2","stale_co","win:tail","crowd:"],"computed_at":"2026-10-21T05:46:15Z"},"pay":{"stated_usd_annual":240000,"is_top_pay":true},"html_url":"https://alion.io/job/liberate-lead-security-and-infra-engineer","json_url":"https://alion.io/job/liberate-lead-security-and-infra-engineer.json","meta":{"generated_at":"2026-10-21T15:01:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21387,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":678753},"rest":"https://alion.io/mcp/rest/get_company?id=678753"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fliberate-lead-security-and-infra-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fliberate-lead-security-and-infra-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fliberate-lead-security-and-infra-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/liberate-lead-security-and-infra-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fliberate-lead-security-and-infra-engineer"}]}