Secops / Security Engineer

MindSource

  • San Francisco, CA
  • 30+ days ago
  • Remote

    Highlights

    Experience : Minimum 5+ years in a security engineering role, with a focus on large-scale infrastructure and experience in open-source projects, development, and tooling. Security Monitoring & Incident Response: Utilize Wazuh, Teleport, and OpenCTI for security monitoring, threat detection, and log analysis .

    Numbers & Facts

    LocationSan Francisco, CA (
    Remote
    )

    Description

    Title: Sr. Security Engineer (Kubernetes)
    Location: 100% Remote
    Duration: Long term
    Type: Contract - W2
     
    Experience: Minimum 5+ years in a security engineering role, with a focus on large-scale infrastructure and experience in open-source projects, development, and tooling.
     
    Technical Skills:
    • Strong experience with Kubernetes and container orchestration.
    • Proficient in Linux system administration.
    • Extensive knowledge of databases (both relational and NoSQL) with experience in elastic databases.
    • Advanced knowledge of Splunk for monitoring, incident response, and integration with SOC processes.
    • Strong in Python for development, scripting and automation.
    • Demonstrated experience in developing and integrating open-source security tools.
    • Proven experience with SOC automation and streamlining incident response processes.
     
    Key Responsibilities:
    Kubernetes Infrastructure & Deployment Security:
    • Secure Kubernetes clusters, containerized workloads, and cloud-native applications.
    • Implement secure CI/CD pipelines to enforce security policies in deployments.
    • Conduct Kubernetes security hardening, RBAC configuration, and audit logging.
    • Work with open-source security tools to monitor, detect, and remediate vulnerabilities.
    • Be a builder of securty infra NOT a user
     
    DevSecOps & Automation:
    • Develop automated security workflows using Python, Ansible, and GitHub Actions.
    • Integrate container security tools (e.g., Trivy, Falco, Anchore, Open Policy Agent (OPA)).
    • Implement infrastructure-as-code (IaC) security using Ansible and Terraform.
    • Automate compliance checks and enforce security guardrails in CI/CD processes.
     
    Security Monitoring & Incident Response:
    • Utilize Wazuh, Teleport, and OpenCTI for security monitoring, threat detection, and log analysis.
    • Set up intrusion detection and SIEM solutions for Kubernetes environments.
    • Respond to security incidents, conduct forensic analysis, and implement remediations.
     
    Database & Network Security:
    • Secure PostgreSQL and MariaDB databases with encryption, access control, and monitoring.
    • Implement network security controls, including firewall rules, Zero Trust principles, and intrusion detection.
    • Perform regular vulnerability scans and penetration testing to identify security gaps.

     

    Similar Jobs