Senior SecOps Engineer

This is a fully remote position, open to applicants in Mexico.

📋 Description

• Leading the design and execution of comprehensive infrastructure and application security solutions for our customer-facing SaaS platform in AWS public cloud environments.

• Steering the architecture, implementation, configuration, and automation of both native and third-party cloud security solutions aimed at hardening, detecting, preventing, logging, and responding to security vulnerabilities and threats.

• Offering strategic insights with a security-focused perspective to the organization.

• Collaborating closely with Product, Engineering, and IT teams in a DevSecOps model, utilizing technologies such as firewalls, access control lists, web application firewalls, IAM roles and permissions, vulnerability management and hardening, threat and intrusion detection, Kubernetes container security solutions, penetration testing, and endpoint security.

• Assisting with incident response and triage activities as necessary for security incidents and events.

• Leveraging AI in security operations to enhance and streamline the management and resolution of security incidents.

⛳️ Requirements

• 5-7 years of prior experience in deploying and managing security infrastructure within AWS public cloud environments, utilizing Infrastructure as Code is essential.

• Extensive hands-on experience with at least one public cloud platform (AWS or GCP) and advanced knowledge in securing IaaS platforms and services such as web application firewalls, security groups, EC2/Compute, EKS/GKE, ECR/GCR, S3/Cloud Storage, RDS/Cloud SQL, as well as logging and monitoring.

• Previous experience collaborating closely with Product, DevOps, and CloudOps' Site Reliability Engineers on shift-left strategies and CI/CD tools and solutions is required.

• Experience with data loss prevention (DLP) and endpoint security products is a significant advantage.

• Security expertise in a cloud-native environment in one or more areas, including authentication, access management, API security, Linux security, vulnerability scanning, threat and intrusion detection, firewalls, WAF, encryption technologies, and container security.

• Proficiency in a programming language such as Python for automation purposes would be beneficial.

• Security certifications from AWS, GCP, CISSP, CEH, or OSCP are preferred.

🏝️ Benefits

• Inclusion fosters innovation.

• Diverse global team.

• Opportunity to make an impact through our mission.