Cloud Security Engineer Infrastructure Security Team

Job Description

Hi there!
We are Semrush a global IT company developing our own producta platform for digital marketers. New stars are born here so dont miss your chance.
This is our

Cloud Security Engineer role for those who strive to implement functional processes and drive them to full completion.

Tasks in the role

• Help to accelerate the implementation of security controls and features in the cloud.
• Perform technical security assessments and architecture design reviews.
• Assist with metrics collection and analytics.
• Participate in regular ongoing infrastructure department tasks (k8s/GCP).
• Advocate security and secure practices throughout Semrush.
• Working with CSA Cloud Controls Matrix cybersecurity control framework.

Requirements

Who we are looking for

• Candidates will typically have 35 years of experience in security and cloudnative architectures.
• Experience with GKE and ability to work with docker/k8s.
• Experience in Linux administration.
• Experience with configuration management tools such as Helm Terraform and Ansible.
• Knowledge of scripting languages such as Python Go and Bash.

They say there are no perfect candidates but that might well be you if

• You have multiple security certifications such as CCSE CISSP Professional Cloud Security Engineer etc.
• Have an understanding of security standards frameworks and benchmarks. (NIST CSF ISO 27001 CIS Controls PCI DSS CSA CCM SOC2.)
• Ability to speak publicly and deliver technical presentations.
• Excellent problemsolving communication presentation and active listening skills.
• You share our common values: Trust as we prefer to speak up and be our true selves; Sense of Ownership as its not worth wasting time on something you dont believe in; and enthusiasm for Constant Change as we are always looking to make things better.

A bit about the team

You can get to know the team better at one of the interviews but some brief information about future colleagues will be useful now.

The group currently consists of five experienced engineers and we are engaged in the provisioning and development of infrastructure security in the company. Our team has big plans and ambitions. We try to make all decisions jointly. We are missing a colleague who likes to solve complex tasks see the big picture and link different systems together to achieve the best result who is ready to explore and create new things and who is not afraid to look at the backlog sometimes.

We have several projects underway

• Participate in the data inventory and classification process.
• Develop and implement secrets rotation in a cloud environment.
• Overall GKE Security enhancing (runtime security security posture).
• Multiple ongoing security activities.

We also have many plans that have yet to be discussed and implemented. There is an opportunity to offer your vision of how we can improve infrastructure security and what opportunities there are for automation.

We will try to create all the right conditions for you to work and rest comfortably

• Its up to you to decide what work format works best for you. You can #wfo #wfh or mix both.
• Flexible working day start
• Unlimited PTO
• Hobby benefit
• Breakfast snacks and coffee at the office
• Corporate events
• Training courses conferences
• Gifts for employees

Finally a little more about our company

Weve been developing our product for 15 years and have been awarded G2s Top 100 Software Products Global and US Search Awards 2021 Great Place to Work Certification Deloitte Technology Fast 500 and many more. In March 2021 Semrush went public and started trading on the NYSE with the SEMR ticker.

users in America Europe Asia and Australia have already tried Semrush and over 1000 people around the world are working on its development. The Semrush team is constantly growing.

Semrush is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based on race religion creed color national origin sex pregnancy sexual orientation gender identity gender expression age ancestry physical or mental disability or medical condition including medical characteristics genetic identity marital status military service or any other classification protected by applicable local state or federal laws. All employment decisions are based on business needs job requirements merit and individual qualifications.