Security engineer – cloud & infrastructure security

Harness is the AI Software Delivery Platform company, led by technologist and entrepreneur Jyoti Bansal (founder of AppDynamics, acquired by Cisco for $3.7B). Harness has raised approximately $570M in funding and is valued at $5.5B, backed by leading investors including Goldman Sachs, Menlo Ventures, IVP, Unusual Ventures, Citi Ventures, and more. As AI accelerates code creation, the real bottleneck has shifted to everything after the code – testing, deployments, application security, reliability, compliance, and cost optimization. Harness brings AI and automation to this “outer loop,” helping teams ship software faster while maintaining security and governance throughout the entire software delivery lifecycle.

Powered by Harness AI and the Software Delivery Knowledge Graph, the Harness Platform applies deep context and intelligent automation across the software delivery lifecycle with governance and policy-driven controls embedded throughout the platform.

Over the past year, Harness powered over 185M deployments, 82M builds, 18T flag evaluations, 8M security scans, 9.1B optimized tests, 3T protected API calls, and helped manage $2.8B in cloud spend — enabling customers like United Airlines, Morningstar, and Choice Hotels to accelerate releases by up to 75%, reduce cloud costs by up to 60%, and achieve 10x DevOps efficiency.

With a global team across 26 offices and 27 countries, Harness is shaping the future of AI software delivery — and we’re looking for exceptional talent to help us move even faster.

We are looking for a Security Engineer to join our Security Engineering team. In this role, you will help design, implement, and operate security controls that protect our cloud infrastructure, applications, and enterprise environments at scale.

You will work closely with Engineering, Infrastructure, DevOps, and Compliance teams to identify security risks, troubleshoot complex infrastructure and security issues, develop practical solutions, and drive security initiatives through implementation.

This is a hands-on role that combines security engineering, cloud infrastructure, identity and access management, network security, incident response, automation, and emerging areas such as AI security. You should be comfortable working independently on well-defined problems, learning new technologies quickly, and taking ownership of issues through resolution.

You enjoy hands-on problem solving and are comfortable moving between security engineering, cloud infrastructure, troubleshooting, automation, and incident response depending on the needs of the team.

In this role, you will:

• Design, implement, operate, and continuously improve security controls across cloud and enterprise environments.
• Partner with Engineering, Infrastructure, and DevOps teams to embed security into system design and operational processes.
• Work across cloud security, network security, AI security, Identity and Access Management (IAM), and Privileged Access Management (PAM).
• Evaluate security requirements and recommend practical, scalable, and risk-based solutions.
• Troubleshoot complex security and infrastructure issues across cloud, identity, networking, Kubernetes, and application environments while balancing security requirements with operational needs.
• Implement and maintain security monitoring, detection, and response capabilities.
• Investigate security incidents and support containment, remediation, root cause analysis, and follow-up improvements.
• Conduct security reviews, threat assessments, and architecture evaluations for new and existing systems.
• Implement and maintain security controls for Web Application Firewalls (WAF), network firewalls, ingress, and other network security technologies.
• Build automation using APIs, scripting, Infrastructure as Code (IaC), and AI-assisted workflows to reduce repetitive manual work and improve operational efficiency.
• Develop and maintain security standards, guidelines, runbooks, and operational procedures.
• Participate in the operational ownership of security services, including responding to security requests, production issues, incidents, and time-sensitive security needs.
• Support compliance and audit initiatives by ensuring appropriate security controls are implemented and operating effectively.
• Collaborate with stakeholders across the organization to identify, prioritize, and reduce security risks.
• Design and implement security guardrails for AI workloads and help identify and mitigate emerging AI security risks.
• Continuously evaluate emerging threats, technologies, and industry practices to improve the organization's security posture.

About You

You have 3+ years of experience in Security Engineering, DevOps, SRE, Cloud System Administration, Infrastructure Engineering, or a related field.

A background in DevOps, SRE, Cloud Infrastructure, or System Administration with strong security experience or interest is highly valued.

You have hands-on experience working with public cloud infrastructure and a strong understanding of cloud security fundamentals.

You have hands-on experience with at least one major public cloud platform such as AWS or GCP, including IAM, networking, logging, security controls, and infrastructure troubleshooting.

You understand cloud security principles, network security, and modern security architectures.

You have experience working with identity, authentication, authorization, SSO, and privileged access controls.

You have experience with or are eager to develop deeper expertise in IAM, cloud infrastructure security, network security, and AI security.

You have experience with security monitoring, logging, detection, or incident response technologies.

You have experience troubleshooting infrastructure or cloud security issues and are comfortable investigating problems across multiple technology layers.

You can evaluate security requirements and translate them into practical technical solutions.

You are comfortable working across multiple teams and influencing security outcomes through technical reasoning and collaboration.

You have experience with Infrastructure as Code and automation technologies such as Terraform, Python, scripting, or APIs.

You understand containerized and cloud-native environments such as Kubernetes.

You have experience working with network security controls such as WAFs, firewalls, ingress controls, or cloud-native network security technologies.

You have exposure to security frameworks and compliance standards such as ISO 27001, SOC 2, PCI DSS, NIST, or similar.

You possess strong analytical, troubleshooting, and problem-solving skills.

You are self-driven, proactive, eager to learn, and comfortable taking ownership of problems through resolution.

Bonus Points!

• Experience working in fast-growing SaaS or cloud-native organizations.
• Experience securing large-scale distributed systems and production environments.
• Familiarity with cloud-native security technologies and modern infrastructure platforms.
• Experience building security automation and operational tooling.
• Relevant security or cloud certifications.
• Experience supporting audits, customer security reviews, or regulatory compliance initiatives.
• Experience mentoring engineers and contributing to security strategy and roadmap development.
• Passion for continuous learning and improving security through automation and scalable solutions.

This role is ideal for someone who enjoys solving complex security challenges, building scalable security programs, and partnering closely with engineering teams to enable secure growth.

Harness in the news:

• Accelerating Our Mission to Bring AI to Everything After Code
• Goldman Sachs leads investment in software delivery startup Harness at $5.5 billion valuation
• How Harness runs 16 “startups within a startup” at scale | Jyoti Bansal
• Harness Research Shows AI Visibility Crisis Fueling Security Nightmare
• Harness has been named to the Inc. Power Partner list for software delivery success

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex or national origin.

At Harness, we care about your privacy and are committed to protecting your personal data. For additional information on this topic, you can visit our privacy Portal: https://harness-privacy.relyance.ai/

Note on Fraudulent Recruiting/Offers

We have become aware that there may be fraudulent recruiting attempts being made by people posing as representatives of Harness. These scams may involve fake job postings, unsolicited emails, or messages claiming to be from our recruiters or hiring managers.

Please note, we do not ask for sensitive or financial information via chat, text, or social media, and any email communications will come from the domain @harness.io. Additionally, Harness will never ask for any payment, fee to be paid, or purchases to be made by a job applicant. All applicants are encouraged to apply directly to our open jobs via our website. Interviews are generally conducted via Zoom video conference unless the candidate requests other accommodations.

If you believe that you have been the target of an interview/offer scam by someone posing as a representative of Harness, please do not provide any personal or financial information and contact us immediately at security@harness.io. You can also find additional information about this type of scam and report any fraudulent employment offers via the Federal Trade Commission’s website (https://consumer.ftc.gov/articles/job-scams), or you can contact your local law enforcement agency.