Description

Secure cloud-native environments and manage complex security incidents across hybrid infrastructure. Own the release pipeline security and drive high-severity troubleshooting.

Responsibilities

• Analyze environments to identify technical and operational challenges, developing concrete improvement solutions.
• Lead high-severity troubleshooting and incident resolution alongside cloud and security teams.
• Enforce a secure software development lifecycle within DevSecOps workflows.
• Manage vulnerability and threat mitigation, including application penetration testing.
• Maintain technical knowledge of current threats to cloud, CaaS, and IT environments.

Required Skills

• 5+ years in Information Security with 4+ years focused on cloud security.
• 3+ years of experience in cloud container security.
• Deep understanding of virtualization, containerization, microservices, and serverless computing.
• Proficiency with Kubernetes, Red Hat OpenShift, and OpenStack cloud platforms.
• Experience with AWS, GCP, and Azure.
• Hands-on experience with HashiCorp Vault, CyberArk, or similar PAM and secrets management tools.
• Expertise in Infrastructure as Code using Terraform, CloudFormation, or Azure Resource Manager.
• Knowledge of container security tools including Trivy, Snyk, Falco, and Red Hat ACS.
• Experience with SBOM tools like Syft and Grype.
• Implementation of policy compliance using OPA or Kyverno.
• Observability experience using Prometheus, Grafana, and Vector.
• Bachelor’s degree in IT, Cybersecurity, or a related field, or equivalent experience.

Preferred Skills

• Professional certifications: CISSP, CEH, or CDP (Certified DevSecOps Professional).

Key Skills

Education

Bachelor's Degree