Senior SecOps Engineer
Tala · Mexico
What the posting says
Each fact carries its state:Statedfound in the postingConflictstwo statements disagree, both quotedNot mentionedthe posting does not say
- Employment typeStated
- Full time
- Work arrangementStated
- Remote OK
Not mentioned in this posting
“Not mentioned” means the posting does not say. It is not a no. You could ask the recruiter.
- PayNot mentioned
- The posting does not say
- ShiftNot mentioned
- The posting does not say
- ExperienceNot mentioned
- The posting does not say
- EducationNot mentioned
- The posting does not say
- Visa sponsorshipNot mentioned
- The posting does not say
Requirements, each with its sentence from the posting
These are the employer’s words. The index does not judge whether you meet them.
- No requirement has been itemised for this posting yet. The employer’s words are in the full posting below.
Read the full posting as the employer wrote it
The company has been named to the Fortune Impact 20 list, CNBC’s World’s Top Fintech Companies twice, CNBC Disruptor 50 for five years, and Forbes’ Fintech 50 list for ten years running.
The Role
We are currently seeking a Sr SecOps Engineer to design, implement and maintain suitable infrastructure and application security solutions on AWS public cloud environments using DevSecOps mindset. You will bring world class cloud-native security expertise to implement solutions for security configuration hardening, vulnerability management, detection, protection and monitoring of security threats and intrusions, in an automated fashion.
What You'll Do
-
Driving the design and implementation of defense-in-depth infrastructure and application security solutions for our customer facing SaaS platform in AWS public cloud environments
-
Driving architecture, implementation, configuration and automation of native and third party cloud security solutions for hardening, detection, prevention, logging and response solutions for security vulnerabilities and threats
-
Provide thought leadership with a security bent of mind to the organization
-
Working closely with Product, Engineering and IT in a DevSecOps model on technologies like FWs, ACLs, WAFs, IAM roles and permissions, Vulnerability management and hardening, Threat and Intrusion detection, Kubernetes Container Security solutions, Pen Test and endpoint security
-
Assisting in incident response and triaging activities as needed for security incidents and events
-
Using AI in security operations to streamline and optimize the security incident management, resolution.
What You'll Need
-
5-7 years of previous experience deploying and administering security infrastructure in AWS public cloud environments, using Infrastructure as Code required
-
In-depth hands-on experience with at least one public Cloud platform (AWS or GCP) with advanced knowledge of securing IaaS platforms and services like WAFs, Security Groups, EC2/Compute, EKS/GKE, ECR/GCR, S3/Cloud Storage, RDS/Cloud SQL, Logging and Monitoring
-
Prior experience working closely with Product, DevOps and CloudOps' Site Reliability Engineers on shift-left strategies, CI/CD tools and solutions needed
-
Experience working on DLP and endpoint security product is a big plus
-
Security experience in a cloud native environment in one or more areas: authentication, access management, API security, Linux security, vulnerability scanning, threat and intrusion detection, firewalls, WAF, encryption technologies, container security etc.
-
Experience using a programming language such as Python for automation (would be a plus)
-
Security certifications from AWS, GCP , CISSP, CEH, OSCP preferred
The posting text is reproduced as the employer wrote it; the index adds nothing to it.