What would an average day look like?
As part of the DevSecOps Team, you will commit proactively to follow the latest security practices and tools in the DevSecOps domain. Those include CI/CD and container security tools and practices.
In terms of technical challenges, here are a few challenges our team has solved. If you want to have an idea of what you would work on, give them a try:
- How we can convert the security policies to an as-code manner
- How to comply with PCI/CSS in a Kubernetes cluster
- How can we implement Cloudflare with Terraform
- How can we implement the software dependency and docker image security in CI
Although it varies from customer to customer, the typical stack is entirely cloud-native, and it includes technologies such as AWS, Sonatype, Cloudflare, Snyk, Terraform, Docker/Kubernetes, AquaSec.
While we don’t expect anybody to know our exact stack inside out, and you’ll be given training and help during your onboarding to become fully proficient with it, we expect you to already have a deep understanding of how Linux based distributed systems work at scale, and have covered a similar role in the past.
Who should apply?
This role is ideal for somebody who wants to work with cutting-edge cloud infrastructure at scale and be part of a team always open to new ways of working. The ideal candidate will be passionate about automation and making infrastructure more effective, as well as have a natural flair for explaining complicated concepts in a simple and understandable way.
This all sounds great, what's it going to do for my career?
You will be exposed to new technologies in an environment that will allow you to use them at scale. All our products have a global reach, which means that everything we design has to take this into account. Our infrastructure is deployed in multiple AWS regions and it has to stay fast and reliable at all times.
We always try to solve problems at the right level of the stack, so you will have opportunities to develop both development and operations skills.
You will also be encouraged to invest in yourself and keep learning new things. For example, Friday afternoons can be used to work on different projects that are interesting to you. We also have hack days to disconnect from the day-to-day and explore new technologies and techniques.
Requirements
- Fantastic communication skills
- Deep familiarity with OSI networking, eBPF, and Linux
- Experience with the security aspects of CI/CD
- Experience defining the security policies
- Experience with DevOps practices and culture
- A good understanding of security-as-code
- An automation mindset
Nice to have
- Experience with technologies in our stack is a strong plus, specifically:
- A good understanding of Kubernetes
- Experience with Terraform or other IaC tools
