Information Security Engineer (SN0439)
Job Description
We are looking for a highly technical, hands-on Information Security Engineer who thrives in a code-driven security environment.
- This role is ideal for someone passionate about automating security processes, securing AWS environments, and conducting deep code security analysis.
- You will play a critical role in integrating security into DevOps workflows, collaborating with development teams, and ensuring security best practices are followed from the ground up.
Key Responsibilities
- AWS Security: Take ownership of securing AWS environments, handling day-to-day security operations, and driving long-term security strategies.
- Security Automation: Develop and implement automated security processes to enhance efficiency and threat detection.
- Code Security & Source Code Reviews: Conduct deep security analysis of source code, identifying and fixing vulnerabilities in collaboration with development teams.
- DevSecOps Integration: Seamlessly embed security controls into CI/CD pipelines and DevOps workflows to ensure secure software delivery.
- Developer Enablement: Guide and mentor developers on fixing critical security flaws in their code and implementing best practices.
- Cloud Security Best Practices: Strengthen ECR, ECS, networking, user management, and secrets management security in AWS environments.
- Research & Innovation: Continuously explore and integrate new security technologies and frameworks to enhance the security posture.
Required Skills & Qualifications
- core IT security principles.
- securing AWS environments.
- Ability to code and write secure, production-grade scripts.
- Expertise in automating security processes and integrating security into DevOps workflows.
- code repositories & version control (Git, GitLab, etc.).
- AWS services such as ECR, ECS, IAM, and Secrets Manager.
- Strong understanding of network security
- CI/CD pipelines
- Python & Ansible
- AWS CDK (Cloud Development Kit)
- basic cryptography principles.
- Java security best practices.
- GitLab and Azure security configurations.
Hiring Team Member
