This position reports to the Software Engineering Team Lead (DevOps)
The security Engineers are responsible for securing building and operating security controls, and building out a security platform. The security engineers work closely with the platform and development teams to build a strong defence, as well as enable and support a culture of DevSecOps in the development teams. The company is growing quickly, which brings a number of unique and interesting challenges. Security is growing rapidly in the organization and there is a lot of opportunity to shape the tools, technologies, and culture of security in the company.
Daily work will involve:
1. Architecting and implementing technical solutions to support defensive security
2. Mentoring and coaching security within the organization
3. Deploying, operating, and monitoring SIEM, IPS/IDS
4. Responding to Security Incidents
5. Expanding security auditing and monitoring capabilities
6. Developing custom applications to monitor red flag situations
7. Working with DevOps to secure the platform, hardening servers, networks, Kubernetes
8. Working with Application teams to secure code, consulting on implementations
9. Working with Infrastructure to secure the physical environments (office networks, etc)
10. Hardening servers, and building security into the platform
11. Developing automation so we can focus on the hard problems
12. Developing glue code to extend or integrate systems
Qualifications:
Degree in computer science, or industry experience
Skills and competencies:
Experience:
1. Experience with defensive systems (SIEM, IDS/IPS, Canaries, Fail2Ban, etc)
2. a Solid understanding of Networking (TCP, UDP, IP, nmap, wireshark, etc)
3. Experience with Linux administration (Processes, Networking, Disks, Security)
4. Experience with a configuration management system (Puppet, Chef, Ansible)
5. Can write code (we use Python)
6. Experience with Kafka, Apache Beam, Apache Metron, Apache Spark
7. Experience with Google Cloud, or another cloud provider
8. Experience with Kubernetes, Docker (or containers in general)
9. Experience with Build Systems (Jenkins, Gitlab, Spinnaker)