Position: Senior SecOps / Security Engineer
Company: A-HR
Experience required: 5y
Category: Security
English level: upper
Published: 2021-06-01T00:00:00+03:00

For our Client, we are looking for an experienced Senior Security Engineer with good technical and interpersonal skills to ensure that our security efforts contribute to the improved security posture of our infrastructure and applications.

 Our Client is a global manufacturer of smart beds that improve the overall quality of sleep. The solution detects and automatically adjusts the comfort level:

Track personal sleep data at night
Individual comfort and temperature balance
Comfort adjustment on each side of the bed
The project is related to the development of advanced technologies of the Internet of Things.

Requirements:

• BS or MS in Computer Science or equivalent technical degree
• Minimum of 5 years of relevant experience
• Strong background in application security development, network security, and automation
• Familiar with code versioning tools
• Strong background in Secret as a Service with HashiCorp Vault
• Excellent understanding of AAA (Authentication, Authorization, Auditing)
• Good understanding of known authentication protocols: LDAP, SASL, OAuth, OIDC, Mutual TLS
• Good understanding of known authorization models: ACL, RBAC, ABAC, CBAC, MAC, DAC
• Familiar with SAML, SSO (Single Sign-On), MFA (Multi-Factor Authentication)
• Excellent understanding of PKI (Public Key Infrastructure) and its components: CA, RA, VA, TSA.
• Excellent understanding of TLS/SSL
• Good understanding of cryptography concepts such as digital signature, data integrity, message
authentication, confidentiality, non-repudiation
• Excellent understanding of encryption at rest and in-transit
• Good understanding of symmetric and asymmetric cryptography

• Upper-intermediate English

Additional Qualifications:

• Cross-platform/multi-language development experience
• Familiar with compilers and code generation tools
• CISSP/HCISSP certification or equivalent experience
• Knowledge and experience in security of large-scale cloud-based applications and environments

Responsibilities:

Description:
As a Senior Security Engineer, you will be working side-by-side at the code and architecture level with each of our engineering teams to ensure security throughout our operations and technical systems, from infrastructure to the applications. Your primary focus will be on the life-cycle management of secrets. You will work with various engineering teams including Mobile, Web, Embedded, QA, Cloud, and Data Platform to improve the life cycle management of their secrets.

Responsibilities:
• Deploy, configure, and maintain the Secrets Service infrastructure.
• Guide engineering teams to securely store and retrieve their secrets through automation i.e., API keys, certificates, SSH keys, passwords, encryption keys
• Own the life cycle management of secrets across the infrastructure, applications, and teams
• Perform on-going security testing and code review to improve software security
• Mentor other team members in methods and best practices
• Continually improve DevSecOps infrastructure, tools, processes, and procedures
• Maintain security technical documentation
 

What We Offer

Exciting Projects.
Collaborative Environment
Work-Life Balance.
Professional Development.
Excellent Benefits.
Fun Perks.