This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Engage in a combination of client consulting, internal lab projects, and participation in Open Source initiatives representing ControlPlane.

• Uphold and embody ControlPlane’s technical and cultural values.

• Guide clients through the intricate and rapidly evolving landscape of cloud native technology.

• Assist organizations in adopting and securing complex cloud infrastructures by employing secure-by-design and secure-by-default methodologies.

• Provide services such as threat modeling, penetration testing, supply chain security, DevSecOps consulting, zero-trust architectures, and platform engineering.

⛳️ Requirements

• Familiarity with Threat Modeling and Cloud Native Security architectures (AWS, GCP, Azure).

• Experience with Kubernetes and containers, including but not limited to EKS, GKE, AKS, OpenShift, and container runtimes.

• Understanding of software supply chain security.

• Knowledge of DevSecOps principles and engineering practices.

• Experience in CI/CD processes, automating security tests, and securing pipelines.

• Proficiency in security tools ranging from enterprise solutions like Aqua, Prisma, Sysdig, Lacework, to Open Source tools such as Falco, Kube-hunter, and Kube-bench.

• Experience with hardening guides, compliance, and risk management standards.

• CLI proficiency in any of the aforementioned technologies.

• Competence in Golang or Python.

• Familiarity with Terraform and best practices for cloud infrastructure (IaC, regulated systems).

• Eligibility to work in the UK or EU is required.