We are looking for a skilled and experienced Security Engineer to join our team and take a leading role in designing, implementing, and governing the security posture of our cloud and enterprise environments. This individual will work closely with cross-functional teams to ensure security is embedded across systems, applications, and workflows, aligning with industry best practices and compliance requirements.
Requirements: Mandatory Qualifications:
At least 3 years of experience as a Security Engineer/DevSecOps
Understanding of the Shared Responsibility Model.
In-depth knowledge of securing at least one cloud platform: AWS / Azure / GCP.
Understanding of Landing Zone and Well-Architected Best Practices.
Expertise in IAM (Identity and Access Management), network security (VPC, SG, FW).
Experience in writing cloud policies (e.g., SCP).
Monitoring and logging (CloudTrail, GuardDuty, Security Hub).
Strong understanding of general information security: security principles, encryption, risk management, incident response.
Scripting languages: Python / Bash / PowerShell.
Experience in configuring WAF.
Infrastructure as Code (IaC): Terraform / CloudFormation.
Preferred Qualifications:
Experience in Kubernetes and container security.
Data security (encryption, KMS), securing cloud services (e.g., EC2, Lambda, Containers).
Relevant certifications: AWS Certified Security Specialty, Azure Security Engineer, CCSP (strong advantage).
Familiarity with DevSecOps and code security tools (SAST/DAST).
Experience with CSPM tools (e.g., Wiz, Orca Security, Prisma Cloud).
Familiarity with SIEM tools (Splunk, Sentinel) and investigation capabilities.
Experience securing Microsoft 365 services and Google Workspace.
Understanding of regulations and standards (GDPR, ISO 27001).
Personal Skills:
Hands-on approach.
Strong interpersonal communication skills and teamwork capabilities.
High-level English proficiency.
This position is open to all candidates.