Duco

Senior Security Engineer

Brak informacji o wynagrodzeniu

SeniorOn-site·WrocławFull-time

#467521·Dodano 8 dni temu·2

Źródło: Duco

Aplikuj teraz

Tech Stack / Keywords

AWS SIEMIAMKubernetesAmazon EKSPythonCloudTrailGuardDutySecurity HubKMS

Podsumowanie oferty

As a Senior Security Engineer, you will own threat detection, response and prevention across Duco’s AWS-hosted SaaS platform. You will join the Information Security team, working with Engineering, Platform and IT, and take ownership of its SIEM and managed SOC.

Wymagania

Proven experience in a security operations or cloud security engineering role.
Hands-on SIEM experience, including designing and tuning detections as well as responding to alerts.
In-depth knowledge of AWS security services and architecture, including IAM, Organizations, Service Control Policies (SCPs), CloudTrail, GuardDuty, Security Hub, KMS and VPC design.
Experience with container and Kubernetes runtime security, ideally on Amazon EKS.
A track record of leading security incident response within cloud environments.
Experience working with or managing a managed SOC or Managed Detection and Response (MDR) provider.
Proficiency in Python or a comparable scripting language for automation.
Working knowledge of infrastructure-as-code.
Ability to communicate technical risk clearly and concisely to non-technical stakeholders.

Nice to have:

Experience with detection-as-code practices.
Experience with Security Orchestration, Automation and Response (SOAR) platforms or automated response playbooks.
Experience with Cloud Security Posture Management (CSPM) or Cloud-Native Application Protection Platform (CNAPP) tooling.
Familiarity with financial services regulations and standards, such as the Digital Operational Resilience Act (DORA), ISO 27001 and SOC 2.
Relevant professional certifications, such as AWS Certified Security – Specialty, GCIH, GCIA or GCFA.
Experience applying threat intelligence to inform detection priorities.

Obowiązki

Cloud and corporate security

Own the run-time security posture of the AWS environment, including identity and access management (IAM), organisational guardrails, logging coverage and remediation of cloud security findings.
Secure the corporate environment, including Google Workspace, endpoints and SaaS applications, partnering with IT to define and uphold identity, access and device security standards.

Vulnerability and exposure management

Lead the infrastructure vulnerability management programme, prioritising remediation on a risk basis and driving delivery with the Platform and IT teams.
Develop and oversee the external attack surface management capability.
Coordinate infrastructure and external penetration testing, from scoping through to tracking remediation to closure.

Detection and incident response

Own the SIEM platform, including log source onboarding, development and tuning of detection use cases, and coverage tracking against the MITRE ATT&CK framework.
Act as the internal owner of the managed SOC relationship, including escalation runbooks, service reviews, triage quality and service level agreements (SLAs).
Lead security incident response end to end, from triage and containment through to post-incident review and root cause analysis.
Monitor the emerging threat landscape and recommend enhancements to detection and response capabilities.

Automation, reporting and assurance

Automate repetitive security processes through scripting and infrastructure-as-code.
Deliver operational security metrics that inform risk reporting and key risk indicators (KRIs).
Support internal audits and client assurance activities by evidencing the operating effectiveness of operational security controls.

Benefity

Success Share bonus payments.
Private Medical Insurance – Enel Med.
Life Insurance.
Multisport Program.
Unlimited annual holiday.
Enhanced family leave.
Employee Assistance Programme.
4 volunteering days off.
Referral bonus for recommending someone who is hired.
Spot Rewards.
EAP Wellbee.

Premie

Opieka zdrowotna

Ubezpieczenie

Karta sportowa

Płatne święta

Płatny urlop

Duco

4 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz