SRE, Security Engineer

This is a fully remote position, open to applicants in India.

📋 Description

• Design, implement, and sustain security measures across our cloud-native infrastructure and Kubernetes platforms.

• Establish and enforce best practices for Kubernetes security, including RBAC, Network Policies, and secrets management.

• Conduct security assessments and enhance the security posture of Kubernetes environments.

• Implement and uphold secure GitOps workflows utilizing Helm and ArgoCD.

• Integrate security measures into CI/CD pipelines.

• Deploy, manage, and enhance security monitoring and threat detection solutions.

• Oversee container and infrastructure vulnerability scanning using Trivy.

• Deploy, configure, and maintain Wazuh for security monitoring, log analysis, and compliance reporting.

• Perform application security assessments in accordance with OWASP Top 10 recommendations.

• Assist with security audits, compliance efforts, and risk assessments.

⛳️ Requirements

• Strong practical experience with Kubernetes (K8s) administration and security.

• Experience with Helm and ArgoCD in production settings.

• Proven track record of implementing GitOps and securing CI/CD pipelines.

• Expertise in using Falco for runtime threat detection and monitoring.

• Proficient in Trivy for vulnerability scanning and container security.

• Practical experience with the Wazuh SIEM/XDR platform.

• Solid understanding of Web Application Firewalls (WAF) and OWASP Top 10 security risks.

• Knowledgeable in container security, image hardening, and Kubernetes workload protection.

• Experience in Linux system administration and security hardening.

• Familiarity with Infrastructure as Code and automation practices.

🏝️ Benefits

• Fully remote work environment.

• Collaborate with SRE, Platform Engineering, or DevOps teams.

• Opportunities for security certifications such as CKS (Certified Kubernetes Security Specialist), CKA (Certified Kubernetes Administrator), CISSP, GSEC, Security+.

• Experience with cloud platforms including GCP, AWS, or Azure.