Position: DevSecOps for Ciklum Client Natural Intelligence
Company: Ciklum
Experience required: 1y
Category: Security
English level: upper
Published: 2021-12-01T00:00:00+02:00

**On behalf of Natural Intelligence, Ciklum is looking for DevSecOps Engineer to join our team on full-time basis.**

As a DevSecOps Engineer, your primary challenge will be to manage the security of our global cloud infrastructure, taking the lead on the protection, guidance, designing, automation and support of the cloud security operations. You will also contribute to other security domains and initiatives such as Incident Response, Security Monitoring and Risk Management.
You will work with our DevOps group to ensure that we maintain both high security standards and high availability for production.


**Responsibilities**

▪️Responsible for the security of the Cloud and Monitoring environments
▪️Guide and design a secure infrastructure, assisting DevOps, RnD, IT and other tech leaders to ensure security standards are kept
▪️Identify security tools and lead the implementation of solutions from POC to Production (e.g. CSPM, Runtime Protection, Container Security, Pipeline integrity, API Security, etc.)
▪️Manage and maintain existing security systems and tools
▪️Lead NI’s cloud compliance by maintaining proper audit trails and logging of security events
▪️Work closely with RnD, Product and DevOps to define security strategy and execute it
▪️Be part of architectural design for applications and infrastructure
▪️Work alongside Architects, Developers, IT, and other tech leads in the company to design and support best of breed integrations with 3rd party partners, vendors and clients
▪️Ensure the implementation of Security and Privacy By Design concepts is properly executed across all environments
▪️Lead security audits, network scans and vulnerability assessments on NI’s infrastructure
▪️Respond to security incidents and investigations, taking part in the handling of service faults


**Requirements**

▪️Proven knowledge of core security networking concepts like TLS, SSH, DNS, Firewalls etc.
▪️Strong familiarity with log shipping, monitoring, and AWS
▪️Over 1 year in a DevSecOps, DevOps role or similar role, in which you designed and secured **cloud environments (AWS)**, applied best practices and built a resilient architecture
▪️Over 1 year experience in coding and scripting (Python/Ruby/Go/Bash) for promoting automations in cloud environments
▪️Solid knowledge of information security principles and practices
▪️Solid knowledge of web infrastructure
▪️Over 1 year experience with designing, implementing, supporting and evaluating security-focused tools, vulnerably management tools and services
▪️Over 1 year experience with  periodic Vulnerability assessment and ensuring prioritization of remediation in a high-scale cloud environment
▪️Over 1 year experience in infosec incident handling
▪️**Excellent English**
▪️Happy to work independently and as part of a team
▪️Ability to effectively prioritize and execute tasks


**Desirable**

▪️Working experience of CI/CD and development pipeline technologies
▪️Cloud Security Certifications like AWS Certified Security Specialty – advantage
▪️Understanding of regulatory compliance and how it relates to security and privacy – Advantage
▪️Working experience with containerized environments and microservices, and in particular with container security and secrets management (Docker/Kubernetes)


**What's in it for you**

▪️Unique working environment where you communicate and work directly with client
▪️Variety of knowledge sharing, training and self-development opportunities
Competitive salary
▪️State of the art, cool, centrally located offices with warm atmosphere which creates really good working conditions