Senior Software Engineer - Infrastructure Security (Remote)

Remote · Full-time · Remote · Posted Oct 9, 2026

At a glance

Quora’s mission is to grow the world's collective intelligence. To do so, we have two platforms:
- Quora http://quora.com: a global knowledge sharing platform with millions of monthly unique visitors, bringing people together to share insights on various topics and providing a unique platform to learn and connect with others.
- Poe https://poe.com/: a cloud workspace where millions of users run multiple AI agents on shared context and tools. One subscription, every frontier model, and the collaboration layer that makes them work together.
Behind these products are passionate, collaborative, and high-performing global teams. We have a culture rooted in transparency, idea-sharing, and experimentation that allows us to celebrate success and grow together through meaningful work. Join us on this journey to create a positive impact and make a significant change in the world.
This role will be supporting both our Quora and Poe products.

You will be a key member of the newly created Security Engineering Team, with a mission to keep Quora safe from security problems by building robust protections around our products, infrastructure and people.
This role will be supporting both our Quora and Poe products.

Partner with engineering teams to review cloud and compute architecture design changes
Establish threat models for cloud and compute paved roads to identify security risks
Develop or adopt open-source tools to monitor and harden our cloud Infrastructure, harden our OS, develop security logging pipelines and detect intrusions
Apply your expert knowledge of security best practices for AWS and Kubernetes to inform remediations and the team's control roadmap
Drive the definition and implementation of security policies and monitor in conformance to the policies
Write code for automations that support security requirements like threat detection, incident containment, and network access management
Conduct initial incident triage; determine scope, urgency, and potential impact of security incidents; participate in the incident response process

Product Security: experience building secure web applications and APIs, with a working grasp of the OWASP Top 10 and common vulnerabilities such as XSS, CSRF, and SQL injection