Senior DevSecOps Engineer

Within 1 month, you will:

• Complete our onboarding and learn how we work through our own platform and our Convexity culture


• Map our Azure and AKS environment, our detection and logging coverage, and our ISO 27001 and SOC 2 control scope with the CISO and the Security Engineer


• Meet the DevOps, platform engineering and IT teams you will work with daily


• Shadow alert triage and one customer security assessment end to end

• Be autonomous on our AKS and Azure environment and handle infrastructure related alerts end to end


• Have shipped at least one concrete hardening or automation improvement in production


• Own the infrastructure scope of vulnerability management, from triage to remediation follow up

• Have the honeypot live and producing high fidelity alerts


• Have measurably widened SIEM connector coverage, with documented log sources and retention


• Run infrastructure vulnerability remediation on a predictable cycle with SLA reporting

• Manage detection content as code, with reviewed and tested rules and documented runbooks


• Have largely automated audit evidence on the infrastructure scope


• Have eliminated long lived credentials on the critical paths, so engineering teams ship on secure defaults they did not have to think about

• 5+ years in infrastructure, cloud or platform engineering with a strong security focus, or in security engineering with hands on infrastructure practice


• Production experience with Kubernetes: RBAC, network policies, admission controllers, secrets handling, workload identity, runtime security


• Solid cloud experience, ideally Azure. Strong AWS or Google Cloud experience with a genuine interest in converting works too


• Infrastructure as code: Terraform, GitOps workflows, CI/CD pipelines


• Scripting and automation: Python or Go, plus shell. Comfortable reading and writing code, and opening pull requests on repositories owned by other teams


• Log analysis and investigation: cloud audit logs, query languages, correlation across identity, network and application sources


• Fluent English (US/UK) / B2 level or equivalent (FR).


• Enthusiasm for our working environment explained here: https://bit.ly/Convexity360L

What we offer

• Compensation: Package includes base salary, a variable component and equity 📈


• Benefits/Perks: Work From Home stipend, RTT, lunch vouchers, medical insurance, gym subscription, 1 month parental leave for the second parent.


• Balance: Flexible hours, full remote work possible anywhere in France 🏠


• Diversity, Equity, and Inclusion: We have 6 active ERGs including Mental Health, Environmental/Sustainability, Women, Parents, LGBTQIA2S+, and Ethnic Diversity. Each group has at least one executive team member serving as a member of the group, bringing greater awareness to each group’s activities and providing a quick path to impact 🤝


• Corporate Social Responsibility: Review our CSR Charter: 360learning.com/blog/corporate-social-responsibility-charter 🌎🌏🌍


• Culture: A framework that will help you make an impact - envision our way of working and our Convexity Culture: https://bit.ly/Convexity360L & find out more about the teams, product and processes https://bit.ly/42H1ggC 🚀👩🏻‍💻🏆

• Phone Screen with our Talent Acquisition Manager


• Discovery Meeting with our Head of Security


• Live exercise with our Head of Security and our Head of Devops: investigation of an incident scenario, or review of an insecure infrastructure configuration


• Clarification Meeting with the Security Engineer and a DevOps engineer


• Culture Fit Meeting with our VP of Engineering


• Offer!

Cette annonce provient de Lever. Voir l'annonce originale ↗