{"id":2558041,"url":"https://alion.io/job/opendoor-infrastructure-security-engineer","title":"Infrastructure Security Engineer","company":{"id":2680,"name":"Opendoor","domain":"opendoor.com","url":"https://alion.io/company/opendoor-labs-inc","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Schema","truth_index":{"grade":"A","score":95,"open_postings":32,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":113,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"AWS Bedrock","optional":false},{"name":"Azure","optional":false},{"name":"Claude","optional":false},{"name":"Claude Code","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Datadog","optional":false},{"name":"GCP","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Karpenter","optional":false},{"name":"Kubernetes","optional":false},{"name":"Lacework","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Okta","optional":false},{"name":"OpenAI","optional":false},{"name":"OpenAI Codex","optional":false},{"name":"Prisma","optional":false},{"name":"Python","optional":false},{"name":"Ruby","optional":false},{"name":"Shift-Left","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"Terraform","optional":false},{"name":"TypeScript","optional":false},{"name":"Vault","optional":false},{"name":"Wiz","optional":false},{"name":"Zero Trust","optional":false},{"name":"Amazon EKS","optional":true},{"name":"Amazon Kinesis","optional":true},{"name":"ArgoCD","optional":true},{"name":"AWS Lambda","optional":true},{"name":"Checkov","optional":true},{"name":"Cloudflare","optional":true},{"name":"Falco","optional":true},{"name":"HashiCorp Vault","optional":true},{"name":"Helm","optional":true},{"name":"JavaScript","optional":true},{"name":"Kyverno","optional":true},{"name":"Machine Learning","optional":true},{"name":"Node JS","optional":true},{"name":"Open Policy Agent","optional":true},{"name":"Prowler","optional":true},{"name":"ScoutSuite","optional":true},{"name":"SOC 2","optional":true},{"name":"Threat Modeling","optional":true},{"name":"Twingate","optional":true}],"status":"live","first_seen_at":"2026-06-17T19:48:20Z","employer_posted_date":"2026-06-17","last_verified_at":"2026-10-16T19:29:24Z","board_verified":true,"closed_at":null,"days_open":121,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":120},"description":"About Opendoor\nAt Opendoor our mission is to tilt the world in favor of homeowners and those who aim to become one. Homeownership matters. It's how people build wealth, stability, and community. It's how families put down roots, how neighborhoods strengthen, how the future gets built. We're building the modern system of homeownership giving people the freedom to buy and sell on their own terms. We’ve built an end-to-end online experience that has already helped thousands of people and we’re just getting started.\nAbout The Role\nOur Security Engineering team builds intelligent systems that protect Opendoor and our customers while enabling unprecedented engineering velocity. We apply software engineering and AI to solve security problems across product, infrastructure, and operations by building guardrails where they matter, not gates where they don't.\nAs our Infrastructure Security Engineer, you'll own the security of everything Opendoor runs on including multi-account AWS, Kubernetes clusters, the identity plane connecting every system, and the cloud workloads behind home acquisition, resale, mortgage, title, and escrow. There’s meaningful work already in motion and real room to define where it goes next.\nWhat You'll Do\nOwn the security architecture of our production cloud environment - AWS at the core, spanning multiple accounts, Kubernetes clusters, Terraform-managed infrastructure, and the identity plane that ties everything together.\nEvaluate, build out and operate our cloud security visibility and protection platform ensuring it’s deeply integrated into engineering workflows to drive the automated remediation of infrastructure risks.\nDefine and drive our zero trust access strategy, integrating device trust and identity-aware proxies to provide seamless, secure access to Opendoor infrastructure.\nHarden our Kubernetes environment including RBAC, admission policies, workload identity, runtime protection, image signing, and base-image strategy on top of our Bottlerocket and Karpenter foundation.\nBuild new agentic detection and response workflows using AWS native primitives that close the loop from alert to investigation to remediation.\nDrive a shift-left cloud security strategy within our pipelines using Terraform/Terrakube, GitHub Actions, Elastic Container Registry so that misconfigurations get caught at commit time.\nPartner with the Infrastructure team on cloud-native security decisions: VPC architecture, ingress, secrets management (Vault), service identity, and how Okta extends into AWS, Azure, and GCP.\nRun our cloud detection engineering: GuardDuty, Security Hub, CloudTrail, VPC flow logs - tuned for signal, integrated with Datadog and our incident response playbooks.\nSet the bar for what \"secure by default\" looks like for AI-maximalist engineering - vibe-coded apps, MCP servers, and agent-driven workflows that touch production cloud infrastructure.\nMentor engineers across Opendoor on cloud security patterns, and turn the patterns you see into automated guardrails.\nTech Stack\nCloud Platforms: AWS (primary), Azure, GCP\nContainers and Orchestration: EKS, Bottlerocket, Karpenter, Helm, Argo CD\nIdentity and Access: Okta, Duo, AWS Identity Center, Okta for Kubernetes, Platform SSO (macOS), HashiCorp Vault\nCloud Security Tooling: Lambda, GuardDuty, Security Hub, CloudTrail, Elastic Container Registry, VPC Flow Logs, Kinesis, GitHub Advanced Security, cloud security posture and workload protection platform\nDetection and Observability: Datadog, Cribl, S3\nLanguages: Go, Python, TypeScript, Ruby, Terraform (HCL), Terrakube (self-hosted)\nAI Tooling: Claude Code, Claude Cowork, OpenAI, Codex, Bedrock, Runlayer MCP, custom agent frameworks\nWhat You'll Need\nDeep conviction that AI and automation should eliminate manual work and increase the team's impact, and a track record to prove it. You’ve built agentic systems that replaced reactive security work, not just configured off-the-shelf tools.\nComfort operating with high autonomy in ambiguous environments. You’ve defined what “good” looks like in a domain where no playbook existed, you’re energized by that, not unsettled by it.\nBusiness enablement security mindset. You measure success by business impact and informed risk taking, not by tickets opened or compliance checklists completed.\nCloud or infrastructure security experience, with deep AWS expertise - you can read a CloudTrail event, write a service control policy, and explain why a particular identity trust policy is dangerous, all in the same conversation.\nStrong skills in at least one of Go, Python, or TypeScript, with the ability to read and write Terraform and shell scripts. You are a builder.\nHands-on Kubernetes security experience - RBAC, network policies, admission control,workload identity, image and supply-chain security.\nExperience deploying and operating cloud posture and workload protection tooling (Wiz, Prisma, Orca, Datadog, CrowdStrike Falcon Cloud, Lacework, or equivalent) with a strong opinion on what good looks like.\nIdentity first security mindset and demonstrated ability to build identity and access management solutions at scale.\nHumility and genuine curiosity. You're as excited to learn from engineers across product and infrastructure and enable their work as you are to write detections or design guardrails.\nBonus Points\nExperience designing or operating Zero Trust Network Access (Cloudflare Access, Tailscale, Twingate, Google BeyondCorp, etc.).\nDetection engineering background with a threat modeling and adversarial mindset - writing detections that actually fire on real attacker behavior without burying the team in noise.\nExperience securing AI and machine learning pipelines, agent frameworks, or MCP-style integrations that touch production data.\nFamiliarity with SOC 2, SOX, or other compliance frameworks in cloud environments and an instinct for when compliance work creates real security value.\nOpen source contributions to cloud security tooling (Cartography, Prowler, ScoutSuite, Falco, Kyverno, Open Policy Agent, Checkov, etc.).\nLocation\nThis role is based in our Miami office, in-person four days per week (Monday, Tuesday, Thursday, Friday). Candidates must be based within commuting distance of the office.","description_format":"text","description_chars":6243,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Residential Real Estate","PropTech"],"lifecycle":[{"event":"open","at":"2026-10-14T19:50:30Z"}],"visa":[],"liveness":{"score":29,"band":"fade","label":"Fading","p_open":1,"p_active":0.651,"p_room":0.44,"age_days":120,"expected_fill_days":113,"reasons":["conf:2","win:tail","crowd:"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/opendoor-infrastructure-security-engineer","json_url":"https://alion.io/job/opendoor-infrastructure-security-engineer.json","meta":{"generated_at":"2026-10-16T21:22:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2284,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2680},"rest":"https://alion.io/mcp/rest/get_company?id=2680"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fopendoor-infrastructure-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fopendoor-infrastructure-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fopendoor-infrastructure-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/opendoor-infrastructure-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fopendoor-infrastructure-security-engineer"}]}