Senior Incident Response Analyst

We are looking for a Platform Engineer to join our team, specializing in secure cloud-native infrastructure. In this role, you will focus on secure platform patterns and code security. You will work across the application to improve the security posture, deliver secure, reliable, and efficient solutions for the Centracs Mobility product line.

DUTIES

Security issue mitigation, such as CVEs and Pen test remediation
Hardening of the application, such as containers, Kubernetes clusters, and application services
Secret management and rotation
Improvements to security posture with focus on least privilege and zero trust
Monitoring of the infrastructure for incidents and control compliance
Automation of security updates, such as with AI, for issue mitigation, drift detection, compliance, and environment hardening
Conduct user access reviews and table-top exercises
Maintain and improve system and security documents such as system diagrams
Support current and new security certifications, such as SOC 2, ISO, NIST, etc.
Works closely with the technical and support teams

QUALIFICATIONS

3–6 years of experience in Platform Engineering, SRE, DevOps, Cloud Engineering, or Security Engineering
Hands-on experience securing production cloud infrastructure (AWS, Azure, or GCP)
High-level programming experience such as C#
Experience with security policies and practices, such as SOC 2, ISO 27001, NIST
Experience with containers and orchestration
Networking experience: TLS, firewalls, VPNs, segmentation
Education: Bachelor’s or master’s degree in computer science or equivalent engineering field
Traffic domain experience is desirable

Originally posted on Himalayas

Job Description

This is a remote position.

Platform Engineer (Security)

DUTIES

Security issue mitigation, such as CVEs and Pen test remediation
Hardening of the application, such as containers, Kubernetes clusters, and application services
Secret management and rotation
Improvements to security posture with focus on least privilege and zero trust
Monitoring of the infrastructure for incidents and control compliance
Automation of security updates, such as with AI, for issue mitigation, drift detection, compliance, and environment hardening
Conduct user access reviews and table-top exercises
Maintain and improve system and security documents such as system diagrams
Support current and new security certifications, such as SOC 2, ISO, NIST, etc.
Works closely with the technical and support teams

QUALIFICATIONS

3–6 years of experience in Platform Engineering, SRE, DevOps, Cloud Engineering, or Security Engineering
Hands-on experience securing production cloud infrastructure (AWS, Azure, or GCP)
High-level programming experience such as C#
Experience with security policies and practices, such as SOC 2, ISO 27001, NIST
Experience with containers and orchestration
Networking experience: TLS, firewalls, VPNs, segmentation
Education: Bachelor’s or master’s degree in computer science or equivalent engineering field
Traffic domain experience is desirable

Originally posted on Himalayas