Secops / Security Engineer

Sr. Security Engineer (Kubernetes)Location: 100% RemoteDuration: Long termType: Contract - W2Experience: Minimum 5+ years in a security engineering role, with a focus on large-scale infrastructure and experience in open-source projects, development, and tooling.Technical SkillsStrong experience with Kubernetes and container orchestration.Proficient in Linux system administration.Extensive knowledge of databases (both relational and NoSQL) with experience in elastic databases.Advanced knowledge of Splunk for monitoring, incident response, and integration with SOC processes.Strong in Python for development, scripting and automation.Demonstrated experience in developing and integrating open-source security tools.Proven experience with SOC automation and streamlining incident response processes.Key ResponsibilitiesKubernetes Infrastructure & Deployment Security:Secure Kubernetes clusters, containerized workloads, and cloud-native applications.Implement secure CI/CD pipelines to enforce security policies in deployments.Conduct Kubernetes security hardening, RBAC configuration, and audit logging.Work with open-source security tools to monitor, detect, and remediate vulnerabilities.Be a builder of security infra NOT a userDevSecOps & Automation:Develop automated security workflows using Python, Ansible, and GitHub Actions.Integrate container security tools (e.g., Trivy, Falco, Anchore, Open Policy Agent (OPA)).Implement infrastructure-as-code (IaC) security using Ansible and Terraform.Automate compliance checks and enforce security guardrails in CI/CD processes.Security Monitoring & Incident Response:Utilize Wazuh, Teleport, and OpenCTI for security monitoring, threat detection, and log analysis.Set up intrusion detection and SIEM solutions for Kubernetes environments.Respond to security incidents, conduct forensic analysis, and implement remediations.Database & Network Security:Secure PostgreSQL and MariaDB databases with encryption, access control, and monitoring.Implement network security controls, including firewall rules, Zero Trust principles, and intrusion detection.Perform regular vulnerability scans and penetration testing to identify security gaps.