Secops / Security Engineer

Title: Sr. Security Engineer (Kubernetes)

Location: 100% Remote

Duration: Long term

Type: Contract - W2Experience : Minimum 5+ years in a security engineering role, with a focus on large-scale infrastructure and experience in open-source projects, development, and tooling.

Technical Skills: Strong experience with Kubernetes and container orchestration. Proficient in Linux system administration. Extensive knowledge of databases (both relational and NoSQL) with experience in elastic databases. Advanced knowledge of Splunk for monitoring, incident response, and integration with SOC processes. Strong in Python for development, scripting and automation. Demonstrated experience in developing and integrating open-source security tools. Proven experience with SOC automation and streamlining incident response processes.

Key Responsibilities: Kubernetes Infrastructure & Deployment Security: Secure Kubernetes clusters, containerized workloads, and cloud-native applications. Implementsecure CI/CD pipelinesto enforce security policies in deployments. Conduct Kubernetes security hardening, RBAC configuration, and audit logging. Work withopen-source security toolsto monitor, detect, and remediate vulnerabilities. Be a builder of securty infra NOT a user DevSecOps & Automation: Developautomated security workflowsusing Python, Ansible, and GitHub Actions. Integratecontainer security tools(e.g., Trivy, Falco, Anchore, Open Policy Agent (OPA) ). Implementinfrastructure-as-code (IaC) securityusing Ansible and Terraform. Automate compliance checks and enforcesecurity guardrailsin CI/CD processes. Security Monitoring & Incident Response: Utilize Wazuh, Teleport, and OpenCTIforsecurity monitoring, threat detection, and log analysis. Set upintrusion detection and SIEM solutionsfor Kubernetes environments. Respond tosecurity incidents, conduct forensic analysis, and implement remediations. Database & Network Security: Secure PostgreSQL and MariaDBdatabases with encryption, access control, and monitoring. Implementnetwork security controls, includingfirewall rules, Zero Trust principles, and intrusion detection. Perform regularvulnerability scans and penetration testingto identify security gaps.