About the Role
Location: Remote
Type: Full-time
Workplace: remote
Category: Information Security
Job Description:
As a Lead Site Reliability Engineer/SRE – Security Engineering, your background as an engineer will enable us to implement security solutions across a variety of applications and systems, ensuring that our infrastructure and data are protected against the most sophisticated threats. You will spearhead the implementation of security practices across multiple cloud platforms.
We’re looking for a candidate who not only possesses a broad technical security knowledge but also specializes in several areas of deep expertise. Your ability to lead, influence, and communicate clearly will be vital. You should be naturally comfortable explaining complex risks to both technical and non-technical stakeholders, bridging gaps in understanding, and guiding teams toward secure solutions with a balance of firm expertise and diplomatic skill.
Responsibilities:
- Design, develop, and manage security controls within the cloud architecture using best practices and advanced cloud security solutions.
- Collaborate with IT and Engineering teams to integrate security measures with existing infrastructure while ensuring continuous delivery and minimal service interruptions.
- Stay updated with the latest in cloud technology and security advancements to anticipate and guard against new threats.
- Provide leadership and mentorship to a team of cloud security professionals, promoting a culture of security awareness and continuous improvement.
- Manage the response to security incidents and breaches, including the investigation of such events and the coordination of forensic analysis and remediation efforts.
Qualifications:
- You bring over five years of experience in Site Reliability Engineering, DevOps or similar roles, complemented by three years in Security Engineering within enterprise production environments.
- You have a Bachelor’s or Master’s degree in Information Security, Computer Science, or a related field, or equivalent professional experience
- You ideally hold relevant professional certifications such as AWS Certified Solutions Architect, Certified Kubernetes Application Developer, SANS FOR509, SANS SEC541 or other similar cloud native or cloud security certifications.
Technical Expertise:
- You have extensive experience with AWS, Azure, and GCP cloud services, including experience with automating operations, engineering scalability architecture, and deep understanding of network architecture. You are well-versed in AWS cloud-native infrastructure and services such as EC2, S3, EKS, ECR and others.
- You have over five years of hands-on experience in Linux environments and are skilled in Infrastructure as Code languages (Terraform), scripting (Python/Go), source code management, CI/CD platforms, and performance analysis.
- Experience aligning engineering processes with security requirements and best practices.
- You have implemented best practices for container orchestration to protect against vulnerabilities and ensure the isolation and security of containerized applications.
- You have experience working in an environment that adheres to standards such as SOX, ISO 27001, NIST, SOC 2. Experience with HIPAA and HITRUST is desirable but not required.
Leadership Experience:
- You possess demonstrated leadership skills with the ability to manage and mentor a team of security professionals. You are an effective communicator and worked closely with cross functional teams to implement security outcomes.
- You have excellent problem-solving skills with a strategic mindset that allows you to think methodically and execute plans effectively.