SRE - Security Engineer

InfraCloud Technologies

About The Position

We are seeking a Security Engineer to design, implement, and maintain security controls across our cloud-native infrastructure and Kubernetes platforms. The ideal candidate will have strong expertise in Kubernetes security, GitOps practices, container security, threat detection, vulnerability management, and application security. You will work closely with Platform Engineering, SRE, DevOps, and Development teams to ensure security is embedded throughout the software delivery lifecycle.

Requirements

Strong hands-on experience with Kubernetes (K8s) administration and security.
Experience with Helm and ArgoCD in production environments.
Experience implementing GitOps and securing CI/CD pipelines.
Expertise in Falco for runtime threat detection and monitoring.
Experience with Trivy for vulnerability scanning and container security.
Hands-on experience with Wazuh SIEM/XDR platform.
Strong understanding of Web Application Firewalls (WAF) and OWASP Top 10 security risks.
Knowledge of container security, image hardening, and Kubernetes workload protection.
Experience with Linux system administration and security hardening.
Familiarity with Infrastructure as Code and automation practices.
Container and Kubernetes security.
Cloud-native security architecture.
Vulnerability management and remediation processes.
Security monitoring, incident response, and threat hunting.
Identity and access management principles.
Secure software development lifecycle (SSDLC).

Nice To Haves

Experience working alongside SRE, Platform Engineering, or DevOps teams.
Security certifications such as: CKS (Certified Kubernetes Security Specialist), CKA (Certified Kubernetes Administrator), CISSP, GSEC, Security+.
Experience with cloud platforms (GCP, AWS, or Azure).
Experience implementing security policies using OPA/Gatekeeper or Kyverno.
Knowledge of SOC operations and compliance frameworks (ISO 27001, SOC2, PCI-DSS, NIST).

Responsibilities

Design, implement, and maintain security controls for Kubernetes clusters and containerized workloads.
Establish and enforce Kubernetes security best practices, including RBAC, Network Policies, Pod Security Standards, admission controllers, and secrets management.
Secure container images, registries, and deployment pipelines.
Perform security assessments and hardening of Kubernetes environments.
Implement and maintain secure GitOps workflows using Helm and ArgoCD.
Integrate security controls into CI/CD pipelines, including automated security scanning and policy enforcement.
Review deployment processes to ensure compliance with security standards.
Collaborate with engineering teams to embed DevSecOps practices across the software development lifecycle.
Deploy, manage, and optimize security monitoring and threat detection solutions.
Configure and maintain runtime security monitoring using Falco.
Investigate security alerts, incidents, and suspicious activities within cloud-native environments.
Develop and maintain incident response procedures and playbooks.
Manage container and infrastructure vulnerability scanning using Trivy.
Analyze security findings, prioritize remediation efforts, and coordinate fixes with engineering teams.
Track vulnerability metrics and ensure timely remediation of critical risks.
Deploy, configure, and maintain Wazuh for security monitoring, log analysis, and compliance reporting.
Create detection rules, dashboards, and alerts to improve security visibility.
Correlate events from multiple sources to identify potential threats.
Implement and maintain Web Application Firewall (WAF) solutions.
Conduct application security assessments aligned with OWASP Top 10 recommendations.
Work with development teams to identify and remediate application security vulnerabilities.
Establish secure coding and deployment practices.
Develop security standards, policies, and operational procedures.
Support security audits, compliance initiatives, and risk assessments.
Maintain documentation for security architecture, controls, and operational processes.