Senior Digital Security Engineer

Skills
Application SecurityCloud SecurityData PrivacyInfrastructure SecurityNetwork SecuritySecurity ControlsVulnerability
Role

What the job involves

The main requirements, responsibilities and hiring steps.

Requirements

  • 4+ years experience with AWS cloud security and understanding of AWS services and cloud security controls such as IAM, RDS, EKS, KMS, VPC, Security Groups, AWS Inspector, Guard Duty, SCPs.
  • 2+ years experience with devsecops pipelines and infrastructure security.
  • Experience with CSPM and infrastructure vulnerability management.
  • Knowledge and hands on skills with Docker, ECS, Kubernetes, and container security.
  • Experience working with devops/platform teams to drive engineering remediations for threats and vulnerabilities.
  • Working knowledge of general purpose programming or script languages, preferably Python.
  • Excellent relationship building skills across diverse cross-functional teams.
  • Exceptional written/oral communication skills.
  • Exceptional bias for action and ownership.

Day to day

  • Designing, implementing, and maintaining security initiatives to protect the organization's cloud-based infrastructure and data.
  • Analyze incident patterns and identify gaps in security on the cloud.
  • Work closely with development and platform teams to achieve security objectives.
  • Collaborate with the Security Automation and Tooling team to implement security tooling at scale.
  • Function as a cloud security SME and provide remediation guidance.
  • Develop and maintain security standards and best practice documentation.

Hiring process

  • Application through careers page, communications from @onepeloton.com