Security Engineer

Job Description

Requirements
What You’ll Do:

Create secure architectural designs and perform security reviews with Engineering teams
Provide guidance on security solutions and best practices to internal teams
Utilize a monitoring infrastructure to collect actionable security signals and automate remediation
Follow DevOps principles in implementing and maintaining security controls in a cloud-based infrastructure
Keep security measures at the cutting edge as security for what we are building will be of utmost importance
Perform security reviews of existing code bases including vulnerability scanning and best security practices in regard to pipelines
Identify, evaluate, and conduct proof-of-concepts for new technologies, enabling secure development of core architectural components
Research the latest security standard methodologies, trends, threats and vulnerabilities, and technology frameworks
What You Should Have

2+ years in Security Engineering, DevOps, or IT Operations roles
Familiarity with DevOps practices as well as software engineering fundamentals, patterns, and design
Understanding of the shared responsibility model in AWS
Experience building and securing infrastructure code using Ansible, Terraform, CloudFormation, and/or similar tools
Experience integrating security practices into development lifecycles and sprint planning
Experience with programming languages for automation tools (Python)
Experience with Infrastructure as Code tools such as Terraform, Ansible, and Cloudformation
Experience with unit and integration testing, continuous integration, and deployment workflows
Experience securing REST APIs and integrating third-party APIs
Knowledge of security best practices and how to implement them in cloud infrastructure
2+ years of Ubuntu / Unix / Linux system administration
General understanding of PKI, X.509, ASN.1, key exchange protocols, and authentication protocols

What You Could Have

2+ years experience building and working on cloud infrastructure for large scale distributed systems (primarily AWS-based)
Experience developing REST APIs and integrating third-party APIs
Experience Developing Security tools
Knowledge of IAM, VPC, CloudWatch, API Gateway, Lambda, S3, ECS, Lambda, EKS, KMS, Shield, etc. is a strong plus
Bash Shell scripting
Experience implementing and leveraging logging and/or monitoring solutions is a plus
Relevant security and AWS certifications are a plus, but not required
Understanding/working knowledge of public cloud infrastructure and networking fundamentals in AWS
Relational Database Administration