Overview
The Security Engineer Infrastructure plays a crucial role in safeguarding the organizations infrastructure and ensuring the integrity confidentiality and availability of data and systems. This role is vital for identifying and addressing potential security threats ensuring compliance with security policies and maintaining a secure infrastructure environment.
Key Responsibilities
- Implement new and update existing security measures for the protection of infrastructure.
- Generate primitives (AMI Bastion Instance Air Gapped deployment etc) for secure infrastructure
- Utilize log ingestion platform for security analytics and identification of tactics techniques and patterns of attackers
- Provides solutions to audited access risk assessments in permission escalation and vulnerability assessments
- Build models for anomaly detection and identify ongoing pen testing
Required Qualifications
- A strong background with AWS or other cloud technologies
- Deep expertise with GNU/ Linux systems
- Previous development experience preferably in Python JavaScript or Go
- Experience with security automation and continuous integration/continuous delivery (CI/CD) pipelines including experience with Github ActionsFamiliarity with cloudnative security tools and practices such as Secrets management runtime protection and network segmentation
- Experience with security best practices and services in cloudExperience with containerization technologies such as Docker and Kubernetes
- Strong problemsolving and analytical skills
- Proficiency in Mandarin in order to liaise with mandarinspeaking counterparts and stakeholders
Bonus points:
- Extensive experience with Hashicorp Terraform
- Experience with security tools and technologies such as vulnerability scanners security compliance frameworks and static/dynamic analysis
- A deep understanding of security best practices including secure infrastructure security automation and DevSecOps methodologies
gnu/linux,security automation,containerization technologies,github actions,devsecops,security compliance,hashicorp terraform,security compliance frameworks,problem-solving,security,python,mandarin,vulnerability scanners,cloud-native security tools,javascript,ci/cd,scripting,aws,network security,go,infrastructure,linux