Infrastructure Security Engineer

Hace 2 días

barcelona, kingdom of spain Factorial Jornada completa

Gratis con email o Google

Guarda esta oferta y sigue tu búsqueda

Crea una cuenta gratis para guardar empleos, crear alertas y volver a esta oferta desde tu panel.

Gratis con email o Google

Al continuar, aceptas nuestros Términos & Política de Privacidad.

Описание: One of the companies we work with at Joppy is looking for an Infrastructure Security Engineer to join the team.

Задачи:

Drive the security strategy for our cloud environments, ensuring security is baked into the architecture from day one.
Continuously monitor security alerts and incidents.
Conduct thorough incident response and detailed investigations to identify root causes within the infrastructure stack.
Lead the identification, assessment, and remediation of infrastructure vulnerabilities.
Maintain the infrastructure risk register and prioritize mitigation efforts based on business impact.
Implement and maintain rigorous hardening strategies across our infrastructure to increase resilience against sophisticated cyberattacks.
Develop and manage infrastructure security tooling (CNAPP, CSPM, Vulnerability Scanners) to ensure accurate threat detection and automated compliance.
Secure the infrastructure and runners within our CI/CD pipelines, ensuring the environment where code is built and deployed is protected.
Partner with Infra, IT, DX and SRE teams to integrate infrastructure security best practices and automate security controls.
Develop, maintain, and regularly update incident response plans and infrastructure security policies.

Требования:

4+ years of experience in Infrastructure Security or Security Engineering, specifically within Cloud environments, Infrastructure as Code, and Containerization (Kubernetes).
Experience using and managing EDR, CNAPP, DLP, SIEM, and vulnerability management solutions.
Strong understanding of Cyberattacks and Threat Actor Tactics, Techniques, and Procedures (TTPs) related to infrastructure and cloud escape.
Deep experience managing enterprise-grade vulnerability scanning and risk prioritization workflows.
Strong understanding of network security, OS hardening (Linux/Unix), and identity management (IAM).
Proficiency in scripting and automation using Python, Bash, and AI, to streamline SOC operations.
Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent experience.
Будет плюсом: Industry certifications

Условия: