Position: Security/Network Engineer
Company: Luxoft
Experience required: 5y
English level: upper

Our client is an initiative to replace outdated, inefficient post-trade processes with modern solutions. We are building a secure digital platform that will minimize external clients' operating risks while increasing market efficiency for the entire commodities trading and shipping industry.
Responsibilities:
The role:

As a DevSecOps engineer, you will be designing, implementing and operating the Observability and Security Operations Centre as part of one of our largest project teams, ensuring our cloud-based enterprise production systems meet the requirements for monitoring, tracing, alerting and security operational readiness. This includes the continuous improvement of our security processes & tools as well as proactive monitoring, detection, containment, and remediation of security threats.
Your responsibilities will include:
Integrate multiple data streams and feeds from networks, infrastructure services, mission/business applications into a near, real-time dashboard for use in troubleshooting and security incident response activities.
Set up IT monitoring solutions by pulling together data from logs, metrics, traces and events to empower operators and developers to identify root causes of issues and resolve them quickly.
Capture applications baseline performance deviations and implement proactive monitoring and alerting of production systems.
Work closely with development and product management team members to define and setup application logs, monitoring, tracing, alerting and performance metrics
Set the security policy direction for both build and run phases
Securing cloud based PaaS services and networks for our production systems
Represent DevSecOps in design reviews and work with engineering teams to meet security operational readiness Maintain and continuously improve existing security tools and measures
Review & prioritization of image vulnerabilities in collaboration with engineering teams
Monitors applications to identify and remediate a possible cyber-attack, intrusion or other security events Managing security events
Researching potential items of risk, vulnerability and opportunities in the infrastructure
Serving as 3rd level support for issues related to security and observability

Job requirements

Qualifications:
6+ years experience running high availability systems and supporting cloud based infrastructure with focus on Security, Monitoring and Logging
Utilizes logs and analysis tools to assist in cyber threat detection and incident response activities as required. Provides advice and guidance to users and cross IT functions on the Information Security practices. Knowledge of SecDevOps toolbox and technologies, scripting, and automation for containerized applications
                  
Demonstrated understanding of networking in a production environment (Virtual Networks, Advanced routing, IPsec tunnels, VPN, GRE, policy based routing, DDos protection)
Experience with containerized environments and microservices, and in particular with container security and secrets management (Docker/Kubernetes/AKS)
Scripting experience in python/bash/go or equivalent
Hands-on experience working with cloud providers such as Azure and AWS
Strong analytical and problem solving capabilities
Demonstrated ability to think on feet and resolve issues in a fast paced environment Excellent verbal and written English skills

Nice to have:
Experience working with Azure tools and solutions for securing your environment (like Azure Security Center, Azure Sentinel, Azure FrontDoor, Azure Policies,, etc)
Experience working with Aqua Security
Hands-on experience working with Terraform or ARM Production operations experience is an advantage Familiarity with CI/CD methodologies and tools Technological degree in Computer science or equivalent
Mandatory Skills:Kubernetes, Security Testing, AWS, Continuous Monitoring, Docker, Security Audit, Microsoft Azure Cloud Platform, CI/CD, Scripting, Logging
Nice-to-Have Skills:
Experience working with Azure tools and solutions for securing your environment (like Azure Security Center, Azure Sentinel, Azure FrontDoor, Azure Policies, etc)
Experience working with Aqua Security
Hands-on experience working with Terraform or ARM Production operations experience is an advantage Familiarity with CI/CD methodologies and tools Technological degree in Computer science or equivalent
Languages:
English: B2 Upper Intermediate