Тип вакансії: Повна зайнятість

Розташування:

RedCore is an international business group that creates technological solutions for digital markets. Our products and services cover fintech, marketing, e-commerce, customer service, communications, and regulatory technologies.

We are looking for a Middle SecOps Engineer!

Requirements:
– 2+ years of professional experience in Security Engineering, Infrastructure Security, Cloud Security, DevSecOps, or a related role.
– Strong understanding of infrastructure and network security principles, including network segmentation, firewalls, access control, TLS, secure network configuration, and service-to-service
communication.
– Practical experience with Linux systems security and hardening.
– Experience conducting security audits, configuration reviews, vulnerability assessments, or compliance assessments.
– Good understanding of CIS Benchmarks and security hardening principles.
– Experience with vulnerability management, including vulnerability validation, prioritization, remediation tracking, and risk-based decision making.
– Experience with security monitoring / SIEM / security analytics tools.
– Understanding of security incident response processes and basic incident investigation techniques.
– Understanding of patch management and operating system vulnerability remediation processes.
– Experience with cloud infrastructure security, preferably AWS.
– Understanding of Kubernetes security and container security principles.
– Ability to read and understand infrastructure configurations, logs, security findings, and network flows.
– Basic understanding of Infrastructure as Code and security implications of infrastructure changes.
– Good understanding of security controls and their practical implementation rather than purely theoretical knowledge.
– English sufficient for reading technical documentation and communicating with international teams.

Will be a plus:
– Experience with OpenStack security.
– Experience automating security checks and operational processes using Python, Bash, or similar scripting languages.
– Experience integrating security controls into CI/CD pipelines.

Responsibilities:
– Infrastructure Security Monitoring continuously monitor infrastructure for security events, anomalies, misconfigurations, and potential threats.
– Infrastructure Security Audits plan and conduct regular security audits of infrastructure, cloud environments, operating systems, networks, and security controls.
– CIS Compliance & Hardening Assessment assess infrastructure against CIS Benchmarks and internal security baselines, identify gaps, and drive remediation.
– Vulnerability Management monitor infrastructure vulnerabilities, validate findings, prioritize remediation based on risk, and track remediation progress.
– Security Findings Triage & Escalation triage findings from security tools, audits, and monitoring systems; validate their severity and escalate critical issues according to defined SLAs.
– Security Posture Management continuously assess and improve the security posture of infrastructure and track security improvement initiatives.
– Security Standards & Baseline Compliance ensure infrastructure complies with approved security standards, baselines, and security requirements.
– Security Control Validation verify that implemented security controls are properly configured and effectively mitigate the intended risks.
– Security Risk Identification & Reporting identify infrastructure security risks, assess their potential impact, and provide clear reports and recommendations to stakeholders.
– Data Security ensure appropriate infrastructure-level controls are implemented to protect sensitive and business-critical data.
– Patch Management Monitoring & Compliance monitor patch management processes, identify overdue or missing security updates, and work with infrastructure teams to ensure
timely remediation.

Our benefits to you:
An exciting and challenging job in a fast-growing business group, the opportunity to be part of a multicultural team of top professionals in Development, Architecture, Management, Operations, Marketing, Legal, Finance, and more
Great working atmosphere with passionate experts and leaders, sharing a friendly culture and a success-driven mindset is guaranteed
Modern corporate equipment based on macOS or Windows and additional equipment are provided
Paid vacations, sick leave, personal events days, days off
Referral program enjoy cooperation with your colleagues and get the bonus
Educational programs: regular internal training sessions, compensation for external education, attendance of specialized global conferences
Rewards program for mentoring and coaching colleagues
In-house Travel Service
Multiple internal activities: online platform for employees with quests, gamification, presents and news, clubs for movie / book / pets lovers and more
Other benefits could be added based on your location

The post Middle SecOps Engineer appeared first on Remote Work Ukraine [Українське].