SRE - Security Engineer
- Security-Engineer
- SRE
- Cloud-Security-Engineer
- DevSecOps-Engineer
- Platform-Security-Engineer
- SRE-Engineer
- Software-Security-Engineer
- SRE-System-Engineer
- Security-Operations-Engineer
Коротко о вакансии
Компания InfraCloud ищет инженера по безопасности в команду SRE для работы с масштабной инфраструктурой на базе Kubernetes. Специалисту предстоит внедрять и сопровождать инструменты безопасности, выстраивать пайплайны и продвигать безопасные практики разработки. Задачи включают реагирование на инциденты, проведение расследований и автоматизацию контроля уязвимостей. Работа предполагает тесное взаимодействие с платформенными инженерами и командами разработки.
- Формат работы
- удалённо
- География
- Индия
- Зарплата
- 2 000 000 — 3 500 000 INR — по данным Himalayas
- Ключевые требования
- Опыт работы с распределенными системами от 3 лет
- Глубокие знания cloud native систем и сетевого стека
- Продакшен-опыт работы с Kubernetes и DevSecOps
- Навыки программирования на Python, Go или Ruby
- Опыт работы с Ansible, Terraform и профильными security-инструментами
- Кому подойдёт
- Вакансия подойдёт опытным инженерам по безопасности или SRE с глубоким пониманием Kubernetes и DevSecOps, готовым отвечать за защиту масштабных распределенных систем.
Пересказ openqareer по тексту работодателя. Ниже — оригинал объявления.
What is the job like? We run large k8s clusters with 1000s of nodes across many regions on cloud & on-prem. Your role within the security team is to deploy, manage security tooling and promote secure practices. You will work with Platform SREs closely to deploy and manage security tools & pipelines platform wide for SDLC, SBOM, SIEM, Runtime security & forensic requirements. Core activities include,
- Shaping the scope and expertise for security practices across teams.
- Building security into our infrastructure, tools, services, and processes working with Platform SREs and Application development teams.
- Driving design, implementation, and support of security tooling to meet our compliance requirements.
- Developing policies and procedures that improve overall platform security.
- Security Incident response, remediation and conducting forensics.
- Audit compliance, Automate manual efforts, Build dashboards for tracking CVEs, Vulnerabilities , Internal security events.
Who should apply for this role?
- B.Tech/M.Tech or Equivalent in Computer Science, Information Technology, or a related field.
- 3+ years of experience in handling services in a large-scale distributed system.
- Deep understanding of network stack (e.g., TCP/IP, routing, network topologies and hardware, SDN, etc.)
- Deep understanding of cloud native systems & security practices.
- Programming / Scripting (Python, Go, Ruby or preferred scripting languages) and automation skills.
- Production experience with Kubernetes, its deployment patterns with a bent towards DevSecOps.
- Infrastructure as code (Ansible and Terraform).
- Knowledge of Relational & NoSQL databases.
- Experience with security tools such as Wazuh, Trivy, Falco, DefectDojo etc.
- Experience with VAPT , Penetration testing is a plus.
- One or more CI tools like Jenkins, gitops methodologies and CD tools like ArgoCD/Flux.
- Centralized logging systems, metrics, and tooling frameworks such as Loki, Prometheus, and Grafana.
- Ability to work independently and own problem statements end-to-end.
- Great communication, interpersonal and teamwork skills.
- Adaptable to working in a fast-paced environment and alter priorities as per business needs.
Originally posted on Himalayas
openqareer не кадровое агентство: вакансия собрана с открытого источника, отклик подаётся на сайте работодателя.