24 oct
|
Joppy
|
Barcelona
Описание: One of the companies we work with at Joppy is looking for an Infrastructure Security Engineer to join the team. Задачи:
* Drive the security strategy for our cloud environments, ensuring security is baked into the architecture from day one.
* Continuously monitor security alerts and incidents.
* Conduct thorough incident response and detailed investigations to identify root causes within the infrastructure stack.
* Lead the identification, assessment, and remediation of infrastructure vulnerabilities.
* Maintain the infrastructure risk register and prioritize mitigation efforts based on business impact.
* Implement and maintain rigorous hardening strategies across our infrastructure to increase resilience against sophisticated cyberattacks.
* Develop and manage infrastructure security tooling (CNAPP, CSPM, Vulnerability Scanners) to ensure accurate threat detection and automated compliance.
* Secure the infrastructure and runners within our CI/CD pipelines, ensuring the environment where code is built and deployed is protected.
* Partner with Infra, IT, DX and SRE teams to integrate infrastructure security best practices and automate security controls.
* Develop, maintain, and regularly update incident response plans and infrastructure security policies. Требования:
* 4+ years of experience in Infrastructure Security or Security Engineering, specifically within Cloud environments, Infrastructure as Code, and Containerization (Kubernetes).
* Experience using and managing EDR, CNAPP, DLP, SIEM, and vulnerability management solutions.
* Strong understanding of Cyberattacks and Threat Actor Tactics, Techniques, and Procedures (TTPs) related to infrastructure and cloud escape.
* Deep experience managing enterprise-grade vulnerability scanning and risk prioritization workflows.
* Strong understanding of network security, OS hardening (Linux/Unix), and identity management (IAM).
* Proficiency in scripting and automation using Python, Bash, and AI, to streamline SOC operations.
* Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent experience.
* Будет плюсом: Industry certifications Условия:
* Collaborative, multicultural, and high-growth work environment
* Private health insurance
* Access to gym, pools, and wellness programs
* Savings on expenses
* Language classes
* Office breakfasts and organic fruit
* Exclusive discounts on meals
* Free coffee and tea
* Pet-friendly environment
📌 Infrastructure security engineer (Barcelona)
🏢 Joppy
📍 Barcelona