Security Engineer (DevSecOps)

• Security monitoring and alerting. Evolve our monitoring and alerting systems across a variety of infrastructure, from our cloud environments and on-prem servers to end-user devices (we’re currently using tools like Cortex XDR, ESET, Tenable);
  
• Cloud automation. Leverage Infrastructure as Code (IaC) principles to build, manage, and secure our AWS and GCP cloud environments. Automating security controls, compliance checks, and deployment pipelines;
  
• Incident response. Take part in, hone and perfect incident response procedures and reporting;
  
• Infrastructure hardening. Partner with infrastructure teams to proactively identify vulnerabilities, and guide them on hardening and verifying configurations;
  
• Security Enablement. Advise and answer queries from Minders, contribute to security guidelines, awareness and best practices. Work with development teams to integrate threat modeling into the software development lifecycle, identifying and mitigating potential security risks;
  

• Experience. You know what you’re doing and want to learn more. You have at least 3 years of hands-on experience in the field (security, DevOps, SRE);
  
• Security Architecture. You understand how to design secure and resilient systems from the ground up;
  
• Automation Mindset. You are strong proponent of cloud automation and Infrastructure as Code to achieve consistency and scale;
  

Requirements

• Familiar with cloud automation tools like OpenTOFU/Terraform and the AWS CDK;
  
• Knowledgeable in data collection and analysis (SIEM, ElasticSearch/OpenSearch, etc.);
  
• Comfortable with AWS and its security services (GCP is a plus);
  
• Understand computer networking (DNS, TCP/IP, HTTPS, etc.);
  
• Good knowledge of Linux operating system;
  
• Basic knowledge of Windows and Mac operating systems;
  
• Good with scripting languages (Python, Bash, etc.) and eager to learn about software engineering practices;