Description

Education: Bachelor’s degree required.
Job Overview: The Application Security Engineer will secure Interos.ai’s AWS cloud environments, containerized workloads, application stack, CI/CD pipelines, and incident response processes. The role is hands-on and highly collaborative with Engineering, Product, DevOps, and Security Operations.
Top 3 Technical Skills:

• AWS Cloud & Application Security
• Docker / Kubernetes Security
• CI/CD Pipeline Security + Terraform (IaC)

Experience That Would Move a Candidate to the Top

• Hands-on ownership of cloud security implementations
• Experience securing containerized environments
• Knowledge of regulated or government cloud standards (FedRAMP, IL5 preferred)
• Relevant security and cloud certifications

Required Tech / Experience

• AWS cloud security architecture and services
• Cloud application security engineering
• Docker and Kubernetes security
• Infrastructure as Code (Terraform)
• CI/CD pipeline security integration
• Identity management, encryption, and access controls
• Incident response and cloud monitoring

Responsibilities:

• Develop and implement comprehensive cloud security strategies aligned with business objectives.
• Assess current security practices, provide recommendations for and implement improvements
• Oversee AWS architecture and ensure that security settings are optimally configured.
• Demonstrate subject matter expertise on AWS services, emphasizing security best practices.
• Design and implement secure containerization strategies using Docker and orchestration with Kubernetes.
• Ensure the security of containerized applications throughout the development and deployment lifecycle.
• Utilize Terraform to define and provision infrastructure as code, ensuring security controls are embedded in the deployment process.
• Implement automated security checks within the IaC pipeline.
• Implement and manage security controls, encryption, and identity management within AWS environments.
• Conduct regular security assessments and audits to identify and mitigate potential risks.
• Collaborate with cross-functional teams, including developers, operations, and DevOps, to integrate security seamlessly into the development lifecycle.
• Communicate security requirements and best practices effectively to technical and non-technical stakeholders.
• Develop and implement incident response plans for cloud environments.
• Establish and maintain effective monitoring and alerting systems for timely detection and response to security incidents.
• Identify gaps in our security posture and prioritize remediation efforts
• Lead and manage security incidents, conducting thorough investigations as needed to identify root causes and facilitate effective remediation as needed

Key Skills

Education

Any Graduate