Security Engineer – Container & Cloud Security

About the role

We are seeking a highly skilled Security Engineer to design, implement, and maintain robust security systems that protect our organization’s digital assets, infrastructure, and networks. The role focuses on securing containerized environments, hardening orchestrators, and building trusted base images while fostering a security‑first culture across engineering teams.

Key responsibilities

• Build, maintain, and audit hardened Docker/OCI base images and automate scanning workflows.
• Design and enforce security policies in Kubernetes clusters, including RBAC, Network Policies, Admission Controllers, and pod security standards.
• Integrate container vulnerability scanning tools (e.g., Trivy, Clair, Grype) into CI/CD pipelines.
• Design, deploy, and manage firewalls, IDS/IPS, SIEM platforms, and data encryption protocols.
• Conduct regular vulnerability assessments, code reviews, and configuration audits for IaC and running environments.
• Monitor cluster workloads and network traffic, acting as primary responder to real‑time security incidents.

Required profile

• Bachelor’s degree in Computer Science, Cyber Security, IT or related field, or equivalent professional experience.
• 2–5+ years of hands‑on experience in security engineering, DevOps security, or infrastructure security.
• Ability to work full‑time on‑site at the designated office.
• Preferred certifications such as CKS, CISSP, or OSCP.
• Strong analytical, communication, and adaptability skills.

Required skills

• Docker containerization and secure image construction (distroless, multi‑stage builds, rootless execution).
• Kubernetes ecosystem security (managed services EKS/GKE/AKS, RBAC, Network Policies, Admission Controllers).
• Container vulnerability scanning tools such as Trivy, Clair, Grype.
• Runtime security monitoring tools like Falco.
• Scripting with Python, Bash, or Go for automation.
• Public cloud security expertise in AWS, Azure, or Google Cloud Platform.
• Security infrastructure technologies including firewalls, IDS/IPS, SIEM, and data encryption.
• Infrastructure‑as‑Code and CI/CD pipeline integration.