Cloud Security Engineer

20k - 30k PLN20 000 - 30 000 PLN/ mies./ mies.B2BB2B (netto)

SeniorZdalnie·KrakówFull-time·B2B

#464237·Dodano wczoraj·0

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

Bash Grafana DockerKubernetes securityISO 27001Elastic StackOWASP SAMMMicrosoft Azure CloudDevSecOps solutionsAzure Security Center

Podsumowanie oferty

You will secure cloud environments for Synerise’s behavioral data platform. The role focuses on Azure, Google Cloud Platform (GCP), Kubernetes, Docker, and DevSecOps in CI/CD pipelines.

Wymagania

At least 3 years of experience in IT security, with a focus on cloud-native environments.
In-depth knowledge of Kubernetes security, such as RBAC, network policies, and pod security standards, and hands-on experience managing microservices architectures.
Proven experience implementing DevSecOps solutions, including securing CI/CD pipelines such as GitLab CI/CD and ArgoCD, using tools for code security and vulnerability scanning, and automating security processes for application risk management.
Strong expertise in security features and tools for Azure and Google Cloud Platform (GCP), such as Azure Security Center and Google Cloud Security Command Center.
Strong understanding of security threats and attack techniques relevant to containerized and cloud-native environments.
Proficiency with scripting languages such as Python and Bash to automate security processes.
Familiarity with monitoring and logging tools such as Elastic Stack, Prometheus, and Grafana.
Knowledge of security frameworks and best practices such as OWASP SAMM and NIST CSF, and compliance regulations such as GDPR.
Fluency in Polish (C2) and English (C1).

Nice to have:

Certifications such as CKS (Certified Kubernetes Security Specialist), CISSP, Azure/GCP Security Specialty, CEH, or similar.

Obowiązki

Monitor and secure cloud environments, primarily on Azure and Google Cloud Platform (GCP), using built-in security tools and mechanisms and implementing custom tools and controls for self-hosted components based on IaaS.
Implement and manage security measures for containerized platforms using Kubernetes and Docker, with a focus on microservices-based architectures.
Design, implement, and maintain DevSecOps solutions in CI/CD pipelines, integrating tools for code security analysis, vulnerability management and software composition analysis (SCA), and security testing for applications and infrastructure.
Collaborate with DevOps and development teams to embed “security by design” principles throughout the product development lifecycle.
Conduct security audits, including regular penetration tests and vulnerability scans, for applications and infrastructure.
Analyze security incidents, investigate root causes, and implement remediation strategies.
Develop, implement, and maintain security policies and standards based on best practices such as ISO 27001, NIST CSF, and CIS Benchmarks.
Provide education and training for teams on application and infrastructure security.

Benefity

Opportunity to grow in engineering and interpersonal aspects.
Opportunity to implement improvements in the IT support area.
Opportunity to take part in building strategic Big Data-related products used by international clients.

Synerise

13 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz