Senior Security Engineer

#vacancy #job #вакансия #Security

Senior Security Engineer

Обязанности
-Design, implement, and maintain security controls across cloud infrastructure, networks, SaaS, and internal systems.
-Strengthen security of AWS (IAM, VPC, KMS, EC2, EKS, S3, etc), Kubernetes, CI/CD pipelines, identity management, secrets handling, and internal services.
-Build and automate security tooling to reduce manual work and improve visibility.
-Conduct security reviews of new systems, architectures, and product changes.
-Participate in designing HashiCorp Vault solutions, including defining roles, policies, access workflows, and implementing automation for secure secrets lifecycle management
Collaboration
-Work closely with engineering, IT, and product teams to integrate security best practices.
-Support teams with secure design decisions.
-Mentor junior team members and raise the technical bar of the security function.
Security Initiatives
-Own and drive security initiatives end-to-end.
-Continuously improve controls and processes through automation and simplification.
-Lead improvements in identity, network security, secrets management, observability, and detection.
Incident Support and Analysis
-Participate in incident investigations and security troubleshooting.
-Analyze logs, identify root causes, and propose mitigation and prevention measures.
Access Management
-Perform regular access reviews across AWS, Kubernetes, and SaaS.
-Support and improve identity and access management workflows and systems.
Требования
-5+ years of hands-on experience in Security Engineering or similar technical roles.
-Strong understanding of security fundamentals: threats, vulnerabilities, attack techniques, defensive measures.
-Deep experience with AWS (IAM, VPC, KMS, EC2, EKS, S3).
-Strong hands-on experience with Kubernetes in production.
-Familiarity with CI/CD and secure deployment practices.
-Python for automation and tooling.
-Experience with Terraform and/or Ansible.
-Understanding of IAM concepts, OIDC, SAML, and RBAC.
Nice-to-have
-Experience with SIEM platforms.
-Experience with Kyverno or other admission control frameworks.
-Experience with Falco or other runtime security tools.
-Experience with EDR platforms.
-Experience with application security (SDLC, API security).
Условия работы
-Competitive remuneration
-Support in relocation to Cyprus
-Convinient location in Limassol
-Flexible start of the day
-Paid leave of 21 days