Senior Security Engineer, Infrastructure & Automation

At Webflow, we’re building the world’s leading AI-native Digital Experience Platform, and we’re doing it as a remote-first company built on trust, transparency, and a whole lot of creativity. This work takes grit, because we move fast, without ever sacrificing craft or quality. Our mission is to bring development superpowers to everyone. From entrepreneurs launching their first idea to global enterprises scaling their digital presence, we empower teams to design, launch, and optimize for the web without barriers. We believe the future of the web, and work, is more open, more creative, and more equitable. And we’re here to build it together. We’re looking for a Senior Security Engineer, Infrastructure Automation to join Webflow’s Security Operations team. You’ll collaborate closely with our Infrastructure Engineering, Infrastructure Security, Enterprise Security, and Application Security teams to harden our AWS and GCP environments, embed security into our CI/CD pipelines, and champion secure-by-default infrastructure practices. This role is ideal for an engineer who thrives at the intersection of infrastructure security and software engineering. You’ll design and build internal security platforms, APIs, and automation that help Webflow detect, triage, and remediate infrastructure vulnerabilities faster, while enabling engineering teams to ship securely by default. About the role: Location: Remote-first (United States; BC ON, Canada; Ireland; United Kingdom; Mexico; Argentina) Full-time Permanent Exempt The cash compensation for this role is tailored to align with the cost of labor in different geographic markets. We've structured the base pay ranges for this role into zones for our geographic markets, and the specific base pay within the range will be determined by the candidate’s geographic location, job-related experience, knowledge, qualifications, and skills. United States (all figures cited below are in USD and pertain to workers in the United States) Zone A: [$158,000 - 198,000] Zone B: [$149,000 - 186,000] Zone C: [$139,000 - 174,000] Canada (figures cited below are in CAD and pertain to workers in ON BC, Canada) [$180,000 - 225,000] Application Information: Application deadline: applications accepted on an ongoing basis until position is closed and filled As a Senior Security Engineer, you’ll … You’ll lead and execute cloud security initiatives that strengthen Webflow’s infrastructure and operational security posture. Responsibilities are grouped by scope and impact. Infrastructure Security Perform infrastructure security reviews across cloud services, network design, IAM, and platform components. Design, implement, and maintain secure AWS and GCP infrastructure following best practices (least privilege, network segmentation, encryption, monitoring). Partner with infrastructure and platform teams to embed security controls in CI/CD pipelines, infrastructure as code, and containerized environments. Own the cloud security posture management (CSPM) strategy, ensuring continuous compliance and automated detection of misconfigurations. Collaborate with engineering teams to secure Kubernetes and containerized workloads , ensuring adherence to runtime and image scanning policies. Respond to and investigate cloud-related security incidents, providing technical expertise during triage and remediation. Contribute to the design and execution of Webflow’s cloud security roadmap , identifying areas for automation and scalability. Conduct threat modeling and risk assessments for cloud architecture and new service deployments. Translate raw findings into actionable engineering fixes, not just tickets or reports. Security Automation Platform Engineering Design and build internal security services, APIs, and tools that automate infrastructure vulnerability detection, triage, reporting, and remediation. Develop security automation that integrates with CI/CD, cloud control planes, and developer ... (truncated, view full listing at source)