Position: Platform Security Engineer (DevSecOps)
Company: MoveUp
Experience required: 3y
Category: DevOps
English level: fluent
Published: 2022-02-01T00:00:00+02:00

About the role:
We are looking for a highly motivated Platform Secrurity Engineer. The Platform team is responsible for operational coverage of company services which are running on public clouds infrastructure.
You will design and implement scalable security systems that will keep company running smoothly and support our significant business growth.
You will join an innovative, high-performance team and work with cutting-edge technologies.

Responsibilities:
You will be focusing on cross-service security components across the SaaS stack, following a DevOps engineering approach.
You will help improve and operate to support the security aspects of our infrastructure.
As part of this role, you need to have the ability and skills for a constant eye on areas such as automation, scale, process improvement, metric collection and better visibility into production health and reliability for security related aspects.
Identify security tools and lead operationalization of solutions from POC to Production.
Track and prioritize security issues.
Collaborate with developers to optimize service security.

Qualifications:
4+ years as a Security Engineer or DevOps
Strong background in public cloud best practices and building secure and resilient architecture
Experience working with large-scale web applications Experience with containerized environments and microservices, and in particular with container security and secrets management (Docker/Kubernetes/EKS/Service Meshes)
Experience using version control tools
Experience using automation tools such as Bash, Python, Terraform, Ansible, and Gradle
Experience integrating security tools into CI/CD pipelines
Provide technical guidance and implementation support to multiple developer teams in multiple environments working to establish, maintain, and secure CI/CD pipelines.
Support developers in the use of source control, build automation, continuous integration, security, testing automation and deployment automation.
Strong understanding of serverless technologies and security implications deployed in public cloud – AWS Lambda, Containers (EKS, Kubernets), etc.
Container and Kubernetes – Securing container images at rest, build, and runtime.
Infrastructure as Code (IaC) – Ansible, Terraform, Chef, AWS Cloudformation, etc.
Scripting languages such as Python, GoLang, Ruby, etc.
Deep experience in security detection, monitoring, alerting.