Senior Cloud Native Security Engineer

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Report directly to the Delivery Manager

• Engage in a combination of client consulting, internal lab projects, and contributions to Open Source initiatives on behalf of ControlPlane

• Embody and promote ControlPlane’s technical and cultural values

• Guide customers through the dynamic and intricate landscape of cloud native technology by setting a strong example

• Assist organizations in the adoption and safeguarding of complex cloud infrastructures utilizing secure-by-design and secure-by-default principles

• Participate in threat modeling, penetration testing, supply chain security, DevSecOps consulting, zero-trust architectures, and platform engineering efforts

• Contribute to open source projects like Flux CD and offer security tools tailored for Kubernetes environments

⛳️ Requirements

• Proven experience in Threat Modeling and Cloud Native Security architectures (AWS, GCP, Azure)

• Familiarity with Kubernetes and container technologies (experience with EKS, GKE, AKS, OpenShift, and container runtimes is beneficial)

• Background in software supply chain security

• Understanding of DevSecOps principles and engineering methodologies

• Experience in CI/CD, including the automation of security testing and pipeline hardening

• Proficiency with security tools, ranging from enterprise solutions like Aqua, Prisma, Sysdig, and Lacework to Open Source tools such as Falco, Kube-hunter, and Kube-bench

• Knowledge and practical experience with hardening guides, compliance, and risk management standards

• Relevant security certifications such as OSCP, Cloud Provider Security certifications, or CISSP

• Eagerness to learn or experience with CLI tools in the specified technologies

• Proficiency in Golang or Python

• Understanding of Terraform and best practices in cloud infrastructure (IaC, regulated systems)

• Must have the right to work in the UK or EU

🏝️ Benefits

• Competitive and generous salary

• Bonus opportunities

• 33 days of paid vacation, which includes paid leave for all 8 standard UK Bank Holidays

• Enhanced Parental Leave

• Private Medical insurance

• Individual training budget allocated for personal development

• Opportunities to attend conferences

• Comprehensive training (including books, courses, coaching, and internal training beyond budget)

• Support for obtaining qualifications