Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will drive defensive and operational security alongside development and infrastructure teams. You will prioritize and remediate vulnerabilities in production, harden cloud environments, audit IAM and network configurations, and embed automated DevSecOps controls into deployment pipelines. You will collaborate with SRE to implement security controls as infrastructure as code.
Requirements
- Understand DevSecOps, CI/CD pipelines, infrastructure as code, and effective remediation practices
- Have practical public-cloud experience with IAM, networking, and logging services
- Understand containers and Kubernetes, including pods, nodes, ingresses, and manifests
- Have strong Linux and networking knowledge, including TCP/IP, DNS, firewalls, VPNs, and perimeter segmentation
- Prioritize vulnerabilities using technical and business risk
- Communicate recommendations, document technical agreements, and drive remediation with engineering teams
Responsibilities
- Triage CVEs based on contextual risk and drive remediation tickets through verified production closure
- Maintain and prioritize the vulnerability backlog by asset and resolution cycle
- Analyze and refine cloud security rules and alerts
- Audit cloud project configurations, IAM policies, and network segmentation
- Implement and maintain DAST, SAST, SCA, and secret-scanning controls in CI/CD pipelines
- Mitigate technical debt and validate security for relevant architectural changes
- Collaborate with SRE to codify security controls through Terraform and infrastructure as code
Benefits
- Permanent contract
- Flexible working hours and time bank
- Company-paid private health insurance
- Birthday day off and additional days off on December 24 and 31
- Access to specialized cybersecurity, cloud, certification, and crypto/Web3 training