Job Overview
We are seeking a Senior / Site Reliability Engineer (Security) to strengthen the security, reliability and operational efficiency of our cloud infrastructure and Kubernetes environments.
The role combines site reliability engineering knowledge, cloud security and automation with a focus on maintaining security monitoring platforms, integrating cloud telemetry into SIEM, assessing security posture and implementing scalable security controls.
Job Description
- SIEM integration: Integrate cloud and Kubernetes audit, identity, network and workload telemetry into SIEM platforms. Manage log collection, parsing, normalization, retention and ingestion costs.
- Security Service Reliability: Maintain security tools, collectors and telemetry pipelines. Define service-level objectives, monitor availability and ingestion latency and implement operational automation.
- Cloud Asset Discovery: Automate cloud resource discovery across accounts, projects, subscriptions and regions. Maintain asset ownership, service dependencies and security assessment coverage.
- Cloud Security Posture Management: Assess IAM permissions, network exposure, storage security, encryption, secrets management and logging configurations. Identify and prioritize security risks.
- Kubernetes Security: Assess and harden Kubernetes clusters and workloads, including RBAC, workload identities, network policies, admission controls, container security and vulnerability remediation.
- Security Automation: Develop scripts, infrastructure-as-code configurations and CI/CD integrations to enforce security baselines, detect configuration drift and automate preventive controls.
- Detection and Incident Support: Support cloud security detection engineering, incident investigation, root-cause analysis and remediation validation. Maintain dashboards, technical documentation and operational runbooks.
Job Requirement
- At least 5 years of relevant experience in SRE, DevOps, cloud/platform engineering or security engineering, including at least 3 years implementing and troubleshooting security controls in production cloud environments.
- Strong hands-on experience with at least one major cloud platform (GCP, AWS or Azure) and working knowledge of a second platform.
- Practical experience in cloud security assessments, IAM, network security, cloud-native security services and cloud security posture management (CSPM).
- Experience operating and securing production Kubernetes environments such as GKE, EKS or AKS, including RBAC, workload identities, admission controls, network policies and container security.
- Hands-on experience integrating cloud telemetry with SIEM platforms, including log collection, event processing, troubleshooting and investigation queries.
- Proficiency in Python or equivalent programming languages, cloud APIs/SDKs, Terraform or similar infrastructure-as-code tools, Git and CI/CD pipelines.
- Strong Linux and networking troubleshooting skills, including DNS, TLS and connectivity, together with experience in monitoring, alerting and incident response.
- Understanding of SRE principles, including service-level indicators, service-level objectives and safe production changes.
- Strong troubleshooting, problem-solving, technical documentation and cross-team communication skills, with the ability to independently investigate issues and coordinate remediation.
- A relevant degree or equivalent practical experience is welcome.
