Startups · AI

Security & Infrastructure Engineer

PointOne · New York City · On-site

← All jobs
About PointOne

PointOne uses AI to passively track time and review bills. Capture detailed time data that drives insights across your practice, business and people. Backed by Y Combinator.

About the role

You will be shaping critical systems and making architectural decisions that materially affect risk and resilience. You will harden our AWS infrastructure, reduce blast radius, eliminate unnecessary exposure, and ensure our systems scale efficiently and securely.

What they're looking for

  • 5+ years operating AWS infrastructure in production
  • Deep IAM expertise (roles, policies, trust relationships, STS)
  • Strong AWS networking knowledge (VPC, PrivateLink, Security Groups)
  • Experience designing multi-account AWS environments
  • Hands-on experience responding to real security incidents
  • Strong understanding of cloud attack vectors and privilege escalation
More about this role

PointOne builds infrastructure for the legal industry, powering timekeeping and billing systems used by law firms and government agencies.

We build and operate systems that process the most confidential data for institutions working on the most sensitive matters. Security for us is a strategic priority.

We’re hiring a senior engineer to own the security, scalability, and cost efficiency of our AWS environment.

Not a GRC or paperwork-heavy compliance role

Not a vulnerability-scanning-only position

Not a “turn on GuardDuty and call it done” role

You will be shaping critical systems and making architectural decisions that materially affect risk and resilience.

This is a hands-on engineering role at the intersection of security, cloud architecture, and platform optimization.

You will harden our AWS infrastructure, reduce blast radius, eliminate unnecessary exposure, and ensure our systems scale efficiently and securely.

Infrastructure Security

Design and enforce least-privilege IAM across services

Implement permission boundaries and SCP strategy

Reduce attack surface across networking and service exposure

Improve secrets management and KMS key segmentation

Lead threat modeling across...

Read the full posting on PointOne's site ↗

Engineering

Build your edge while you search

Free tools for founders and investors, plus VC Unfiltered, our take on startups, venture and the people who build them.