About the company
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Secops / Security Engineer based in United States.
Responsibilities
- Secure Kubernetes clusters, containerized workloads, and cloud-native applications through hardening, RBAC configuration, audit logging, and security controls.
- Design and implement secure CI/CD pipelines that enforce security policies, compliance requirements, and deployment guardrails.
- Build and integrate open-source security tooling to monitor, detect, and remediate vulnerabilities across infrastructure and applications.
- Develop automated security workflows using Python, Ansible, GitHub Actions, and related technologies.
- Integrate container security solutions such as Trivy, Falco, Anchore, and Open Policy Agent (OPA).
- Implement infrastructure-as-code security controls using Ansible and Terraform.
- Automate compliance checks and security enforcement throughout development and deployment processes.
- Configure and operate security monitoring and threat detection capabilities using technologies such as Wazuh, Teleport, OpenCTI, and Splunk.
- Develop and support SIEM and intrusion detection solutions for Kubernetes environments.
- Respond to security incidents, perform forensic analysis, identify root causes, and implement effective remediation measures.
- Secure PostgreSQL and MariaDB environments through encryption, access controls, monitoring, and other database security practices.
- Implement network security controls, including firewall policies, Zero Trust principles, and intrusion detection.
- Conduct vulnerability assessments and penetration testing to identify and address security gaps.
Requirements
- 5+ years of professional experience in security engineering, particularly within large-scale infrastructure environments.
- Strong hands-on experience with Kubernetes and container orchestration.
- Advanced Linux system administration skills.
- Extensive knowledge of relational and NoSQL databases, including experience with Elasticsearch or similar technologies.
- Advanced Splunk expertise for monitoring, incident response, security analysis, and SOC integration.
- Strong Python development, scripting, and automation skills.
- Demonstrated experience building, developing, and integrating open-source security tools.
- Proven experience automating SOC processes and streamlining incident response workflows.
- Strong knowledge of DevSecOps principles, CI/CD security, infrastructure as code, and automated security controls.
- Hands-on experience with technologies such as Ansible, Terraform, and GitHub Actions.
- Experience with container security and tools such as Trivy, Falco, Anchore, or OPA.
- Knowledge of security monitoring, SIEM, threat detection, vulnerability management, and incident response.
- Experience securing PostgreSQL and MariaDB databases, as well as network infrastructure.
- Ability to build security infrastructure and automation rather than solely operate pre-existing security solutions.
- Strong problem-solving, communication, and collaboration skills.
Conditions
- 100% remote work.
- Long-term contract opportunity.
- W2 contract structure.
- Opportunity to work on large-scale Kubernetes and cloud-native security infrastructure.
- Hands-on exposure to open-source security technologies and modern DevSecOps practices.
- Opportunity to build and automate security capabilities across infrastructure, applications, and SOC processes.