Senior Cloud Security Engineer
About the role
How you will make an impact
In this role you'll get to
- Review system designs and implementations, and consult with engineers across the organization to identify and/or avoid security issues through alignment with security standards and best practices, document and ensure security issues are appropriately remediated
- Leverage subject matter expertise of systems and infrastructure to propose solutions and drive architectural improvements which address classes of security vulnerabilities
- Develop and implement cloud and infrastructure security architecture and contribute to overall strategy and roadmap plans
- Participate in the selection, design, development, implementation, and management of automated security testing tools, such as cloud security posture management and image vulnerability scanners
- Implement solutions that integrate into CI pipelines to shift security as far left as possible and raise concerns early to engineering teams.
- Promote DevSecOps principles and implement Infrastructure as Code (IaC) scanning and policy enforcement to ensure deployments via Terraform, AWS CloudFormation, or similar, are secure and compliant with standards and guidelines
- Coordinate and participate in penetration tests of our cloud services
We are looking for people who have
- 5+ years hands-on-keyboard in Cloud Security, SRE, DevOps, DevSecOps, or Infra Engineering.
- Strong working knowledge of Kubernetes and ecosystem tools such as helm, ArgoCD.
- Production experience with AWS services, particularly AWS Organizations, AWS Identity (SSO), Identity and Access Management (IAM), Service Control Policies (SCPs), Virtual Private Clouds, Elastic Load Balancers, AWS CloudTrail, and Security Groups.
- Proficiency with Terraform.
- Experience developing custom actions or workflows in Github or Gitlab.
- Solid understanding of cloud security vulnerabilities defense techniques and security best practices, including AWS security practices and present-day threats
- Proficiency in a high level programming language, such as Python or Go
- Familiarity with policy management tools such as OPA or Kyverno
Bonus points
- Scala or JVM ecosystem experience
- Familiarity with common observability tools such as Datadog, Prometheus/Grafana
- Experience with AWS EKS
- Experience with Panther SIEM
- Hands on work standing up Jupyter notebook instances, using Jupyter operationally.
Recruitment Disclaimer
Please be aware that Iterable, Inc. ("Iterable") and our official professional recruiting agencies and platforms do not:
- Send job offers from free email services like Gmail, Yahoo mail, Hotmail, etc.
- Request money, fees, or payment of any kind from prospective candidates to apply to Iterable, for employment, or for the recruitment process (e.g. for home office supplies, or training, etc.).
- Request or require personal documents like bank account details, tax forms, or credit card information as part of the recruitment process prior to the candidate signing an engagement letter or an employment contract with Iterable.
You may see all job vacancies on our official Iterable channels:
- Official Iterable website, Careers page: https://iterable.com/careers/
- Official LinkedIn Jobs page: https://www.linkedin.com/company/iterable/jobs/
Iterable is not affiliated in any way to these impostors and we hereby confirm that such individuals/entities are not authorized, encouraged, or sponsored to act on behalf of Iterable. Such job opportunities are entirely fake and not valid. Therefore, please disregard any written or oral request for a job offer or an interview that you believe is or might be fraudulent or suspicious and immediately reach out to us via email at
talent-ops@iterable.com
Not included in the source posting: about the role, qualifications, benefits.
Skills
Who can apply
The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.
Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.