Role Summary:

At NerdWallet, our mission is to bring clarity to all of life’s financial decisions and that starts with empowering our people. We champion an inclusive, respectful culture where every Nerd can grow, speak candidly, and be their authentic self. Whether you’re remote or in-office, we support flexibility so you can thrive in the way that works best for you. We also invest in your well-being, career development, and community impact because when you’re at your best, so are we.

NerdWallet’s Security Team keeps an eye on what’s happening inside NerdWallet and in the world to protect our consumers and the company. We are seeking a Senior Infrastructure Security Engineer who will be passionate about ensuring the privacy and integrity of our users’ sensitive information. In this role your objective will be to build core security tooling for platforms that perform the collection, computation, aggregation, and storage of personal financial data, partnering with technical teams across the company, advising them on secure design patterns for cloud and corporate infrastructure. This role will also lead strategic initiatives to remediate and mitigate infrastructure security risk across the organization.

As a Senior Infrastructure Security engineer, you will be responsible for securing NerdWallet products by identifying risks early and constantly assessing our security posture of public cloud environments. You will help drive development and implementation of automation scripts and workflows to streamline security operations to ensure consistent enforcement of security controls across all of our cloud environments.

This role will report to a Business Information Security Officer (BISO).

Where you can make an impact:

• Keep NerdWallet systems secure - proactively monitor cloud environments for security events and anomalies, such as unauthorized access attempts, data breaches, and configuration changes

• Define and monitor our cloud security posture - assess our current cloud secure posture and ensure that we are constantly reviewing to identify and remediate any potential gaps or vulnerabilities

• Be curious and ready to investigate - respond promptly to security incidents ready to determine root causes and implement prompt remediation actions

• Define what good looks like - identify where our areas of opportunity are and help develop and deploy best in class security controls and measures to protect our cloud-based infrastructure and services

• Mentor junior engineers and provide them guidance when needed

• Take informed risks to move the business forward, even without the full picture, acting with urgency to seize opportunities for long term risk mitigation or remediation

Your experience:

• 5+ years of infrastructure security experience in a professional environment

• A strong foundation in infrastructure security that includes network, host, and cloud technologies (specifically AWS)

• Proficiency writing Python scripts and IaC with Terraform

• The ability to write and review code

• Basic knowledge of Kubernetes

• Effective at communicating security risk impact to business leaders
  

Where:

• This role will be remote (based in the U.S.).

• We believe great work can be done anywhere. No matter where you are based, NerdWallet offers benefits and perks to support the physical, financial, and emotional well being of you and your family.

What we offer:

Work Hard, Stay Balanced (Life’s a series of balancing acts, eh?)

• Industry-leading medical, dental, and vision health care plans for employees and their dependents

• Rejuvenation Policy – Vacation Time Off + 11 holidays + 4 Mental Health Days Off

• New Parent Leave for employees with a newborn child or a child placed with them for adoption or foster care

• Mental health support

• Paid sabbatical for Nerds to recharge, gain knowledge and pursue their interests

• Health and Dependent Care FSA and HSA Plan with monthly NerdWallet contribution

• Monthly Wellness Stipend, Cell Phone Stipend, and Wifi Stipend 

• Work from home equipment stipend and co-working space subsidy

Have Some Fun! (Nerds are fun, too)

• Nerd-led group initiatives – Employee Resource Groups for Parents, Diversity, and Inclusion, Women, LGBTQIA, and other communities

• Hackathons and team events across all teams and departments

• Company-wide events like NerdLove (employee appreciation) and our annual Charity Auction 

• Our Nerds love to make an impact by paying it forward – Take 8 hours of volunteer time off per quarter and donate to your favorite causes with a company match

Plan for your future (And when you retire on your island, remember the little people)

• 401K with company match

• Be the first to test and benefit from our new financial products and tools

• Financial wellness, guidance, and unlimited access to a Certified Financial Planner (CFP) through Northstar

• Disability and Life Insurance with employer-paid premiums

If you are based in California, we encourage you to read this important information for California residents linked here.

NerdWallet is committed to pursuing and hiring a diverse workforce and is proud to be an equal opportunity employer. We prohibit discrimination and harassment on the basis of any characteristic protected by applicable federal, state, or local law, so all qualified applicants will receive consideration for employment.  

NerdWallet will consider qualified applicants with a criminal history pursuant to the California Fair Chance Act and the San Francisco Fair Chance Act, which requires this notice, as well as the Los Angeles Fair Chance Act, which requires this notice.

NerdWallet participates in the Department of Homeland Security U.S. Citizenship and Immigration Services E-Verify program for all US locations. For more information, please see:

• E-Verify Participation Poster (English+Spanish/Español)

• Right to Work Poster (English) / (Spanish/Español) 

#LI-Remote
#LI-4