Security Engineer – Container & Cloud Security

About the role

We are looking for a highly skilled Security Engineer to design, implement, and maintain robust security systems that protect our digital assets, infrastructure, and networks. The focus is on securing containerized environments, hardening orchestrators, and building trusted base images while fostering a security‑first culture across engineering teams.

Key responsibilities

• Build, maintain, and audit hardened Docker/OCI base images and automate scanning workflows.
• Design and enforce security policies in Kubernetes clusters (RBAC, Network Policies, Admission Controllers, pod security standards).
• Integrate container vulnerability scanning tools (e.g., Trivy, Clair, Grype) into CI/CD pipelines.
• Design, deploy, and manage firewalls, IDS/IPS, SIEM platforms, and data encryption solutions.
• Conduct regular vulnerability assessments, code reviews, and IaC configuration audits.
• Monitor cluster workloads and network traffic, acting as primary responder to real‑time security incidents.

Required profile

• Bachelor’s degree in Computer Science, Cyber Security, IT or equivalent experience.
• 2–5+ years of hands‑on experience in Security Engineering, DevOps Security, or Infrastructure Security.
• Full‑time on‑site availability.
• Preferred certifications: CKS, CISSP, OSCP (not mandatory).
• Strong analytical, communication, and adaptability skills.

Required skills

• Docker and OCI containerization, secure image construction (distroless, multi‑stage, rootless).
• Kubernetes ecosystem (EKS, GKE, AKS or self‑hosted) and related security controls.
• Cloud‑native security tools and runtime monitoring (Falco, service meshes).
• Scripting/automation with Python, Bash, or Go.
• Public cloud platforms: AWS, Azure, Google Cloud Platform.
• Security infrastructure: firewalls, IDS/IPS, SIEM, encryption, vulnerability scanning tools (Trivy, Clair, Grype).
• Infrastructure‑as‑Code (IaC) auditing and CI/CD pipeline integration.