Security Infrastructure Engineer / DevSecOps

• Actively managing the security of our cloud-native runtime environment
• Clearly and promptly communicate and negotiate security technical topics with both technical and non-technical audiences
• Drive security improvements to production cloud environments
• Perform targeted offensive security testing
• Implement continuous monitoring systems and tools to automatically identify potential security issues at the code, application and infrastructure layers
• Review code and other production changes with the goal to maintain the security standards
• Stay current on emerging security threats, vulnerabilities, and controls for the cloud
• Working with backend engineering teams on architecting, profiling, and monitoring high-performance high availability product components as microservices, providing mission-critical real-time functionality on the control plane of mobile and fixed networks
• Evolving the infrastructure and keeping our stack up to date with the latest technologies

Job Requirements:

• 3+ years of DevOps or DevSecOps experience
• Experience securing CI/CD pipelines Familiarity with modern DevSecOps tooling (SAST, DAST, SCA, IaC scanning)
• Bachelors degree
• Cloud-native infrastructure stack experience with tools like Terraform, Ansible and etc;
• Experience in the implementation of security controls and familiarity with SCAP and continuous security monitoring solutions
• Knowledge in the development and implementation of the following concepts:
  - Network Security Concepts
  - Linux System Security and System Hardening
  - Data Classification and Data Security Concepts
  - Cloud Security, particularly AWS
• Understanding of various user access controls, SSO, user profile integrity and access management controls
• Ability to analyze and resolve complex infrastructure resource and application deployment issues
• Minimum Intermediate level of English
• Experience with intrusion detection solutions and web application firewalls/L7 proxies
• Experience in Server Application security concepts and security controls
• Hands-on experience with Qualys
• Scripting and automation skills, implementing in Python, Go and similar languages

• Competitive salary package.
• Paid lunch (In the office).
• Yearly bonus.
• Training and workshops.
• Top-of-the class engineers to learn from and work with.