Business Development Representative at xorlab driving proactive lead generation in cybersecurity market. Collaborating closely with sales and marketing team to optimize lead development processes.
About the role
- Cloud Security Engineer focused on enhancing security in a cloud-native fintech platform. Collaborating with teams to integrate security into infrastructure and software development processes.
Responsibilities
- Harden and maintain security across a multi-account AWS environment (IAM, VPC, EKS, RDS, S3)
- Implement and manage cloud security posture monitoring
- Maintain and extend SSO permission sets and Kubernetes RBAC configurations
- Manage network security controls (firewalls, VPN, security groups)
- Drive secrets management, including rotation policies, vault integration, and eliminating hardcoded credentials
- Integrate SAST, DAST, and SCA scanning into CI/CD pipelines
- Implement container image scanning and Kubernetes admission controls
- Add IaC security scanning to the deployment workflow
- Conduct security reviews of infrastructure changes and architecture decisions
- Work with development teams to remediate application vulnerabilities
- Participate in threat modeling for new services and architecture changes.
- Own the vulnerability management lifecycle (scanning, triage, remediation tracking)
- Manage penetration test findings and coordinate fixes with development teams
- Define remediation SLAs and report security posture metrics
- Maintain and improve security monitoring and alerting pipelines
- Manage log aggregation and alert routing for critical events
- Participate in incident response and maintain IR runbooks
Requirements
- 3-5 years of experience in security engineering, DevSecOps, or infrastructure/cloud security
- Strong hands-on AWS experience: IAM, VPC, EKS, CloudTrail, GuardDuty, Security Hub, KMS
- Ability to automate security processes using Python and IaC tools
- Kubernetes experience: RBAC, network policies, pod security, container image security
- Terraform proficiency with ability to read, write, and review IaC
- Experience integrating security tools into CI/CD pipelines (SAST/DAST/SCA)
- Practical vulnerability management experience: scanning, triage, working with developers on remediation
- Scripting skills: Python and Bash
- Familiarity with SIEM platforms (ELK, Splunk, or similar)
- Understanding of OWASP Top 10 and common web application vulnerabilities.
Benefits
- Opportunity to shape the future of fintech solutions within a growing company
- Collaborative, horizontal team structure that values your expertise and ideas
- Continuous learning and development opportunities to enhance your skills and career growth
- Competitive salary and benefits package
- Flexible work arrangements to support work-life balance
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Cyber Security Architect responsible for IT security compliance and cyber - risk management at a Swiss utility firm. Engaging with cross - functional teams to implement 'Secure - by - design' strategies.
Information Security Officer ensuring cybersecurity at an IT service provider for food and beverage sector. Developing strategies and overseeing security protocols while reporting to management.
Head of Information Security at Aurora shaping security strategy and governance in a software - focused global business. Leading security efforts to ensure resilience and compliance across operations.
Senior Security Engineer specializing in penetration testing and security strategies for fintech. Collaborating with teams to enhance security for AI applications and financial systems.
Principal Cyber Security Engineer for Identity Access Management at MSK managing identity solutions and advanced identity platforms. Partnering with stakeholders to align identity strategy and lead IAM initiatives.
Join The Missing Link as a Security Engineer, leveraging 3 - 4 years of IT Security experience. Lead projects in a collaborative environment with a focus on innovation and impact.
Engineer in Health, Safety and Environment for ArianeGroup focusing on industrial risk management. Involves audits, assessments, and safety training participation.
Senior Product Security Engineer at Red Hat focusing on security and compliance for digital sovereign products while collaborating across global teams and enhancing automation.
Security Engineer safeguarding K - 12 student data in several locations for EduTech startup. Designing secure software systems and ensuring data protection to comply with privacy standards.