Requirements:

• 5+ years of experience in IT, with a focus on Dev Ops and security.
• 3+ years of proven experience in a Dev Sec Ops role or a similar position.
• 3+ years of experience with AWS common stack: VPC, EC2, S3, RDS, Elasticache, Route53, Lambda etc.
• 3+ years of experience with AWS security stack: Cloud Trail, IAM, KMS, WAF, Guard Duty, Inspector, Macie etc.
• 3+ years of experience with managing Linux-based systems, TCP/IP networking.
• 3+ years of experience with Ia C and config management tools such as Terraform, Terragrunt, Ansible.
• Experience with git, Docker, Jenkins etc.
• Understanding of regulatory requirements and industry standards(SOC2, ISO27001, PCI DSS etc)
• Excellent understanding of securing data in transit and at rest.

Desirable:

• Kubernetes (AWS EKS) + Helm.
• Message brokers: NATS, Kafka.
• Databases: Mongo DB.
• Hashicorp tools: Vault, Packer.
• Monitoring/Alerting: Datadog, Ops Genie.
• Certification in a cyber security field such as: AWS Security Speciality, CISSP, CSSLP etc.

Responsibilities:

• Security Integration: Incorporate security best practices and controls into the Dev Ops pipeline, ensuring that security is an integral part of the development process.
• Security Automation: Develop and maintain automated security testing and monitoring tools to identify vulnerabilities and threats in the codebase and infrastructure.
• Vulnerability Management: Continuously scan for and assess vulnerabilities in software and infrastructure components, and coordinate their timely remediation.
• Incident Response: Lead or participate in incident response activities, investigating security breaches, and coordinating with the incident response team to mitigate and prevent future incidents.
• Infrastructure Security: Implement and manage security controls for cloud and on-premises infrastructure, including identity and access management, network security, and data protection.
• Security Monitoring and Incident Detection: Set up and maintain real-time security monitoring and alerting systems to detect and respond to security incidents quickly.
• Security Tool Evaluation: Evaluate and select security tools and technologies that enhance the security of the Dev Ops pipeline and infrastructure.
• Security Auditing: Conduct security audits and assessments of the Dev Ops environment, identifying areas for improvement and implementing necessary changes.
• Emergency Response Planning: Develop and maintain incident response plans, including communication protocols and disaster recovery procedures.

With us you will enjoy:

• Working with a team of people to build the future of an industry.
• Non-trivial challenges and various specter of interesting tasks.
• A flexible, friendly and collaborative work environment.
• Corporate culture based on common sense.
• Opportunities to influence the creation of new products and their quality.