Design Engineer Professional

Early Applicant

Exp: 0-2 Years

Job Description

Conduct security assessments at the application, container, and infrastructure levels.
Implement and manage Kubernetes security practices, including RBAC, network policies, and audit logging.
Secure Kafka topics by configuring ACLs, monitoring access patterns, and ensuring data encryption.
Implement database security measures for Postgres and Neo4J DB, including encryption, access controls, and auditing.
Secure the private cloud environment, ensuring compliance with security best practices and implementing appropriate controls.
Integrate security tools into our CI/CD pipeline using Jenkins, Spinnaker, and GitLab CI/CD.
Perform image scanning and signing to ensure the security of container images using tools like Trivy, Clair, and Aqua Security.
Monitor and log security events using tools such as Prometheus, Grafana, Fluentd, Elasticsearch, and Kibana.
Implement runtime security measures and respond to incidents using tools like Falco and Sysdig.
Ensure compliance with industry standards and regulations (e.g., GDPR, HIPAA, SOC 2).
Manage secrets and encryption for sensitive data using HashiCorp Vault and Kubernetes Secrets.
Collaborate with the cloud infrastructure team to enforce security best practices on AWS, Azure, GCP, and the private cloud.
Use Infrastructure as Code (IaC) tools like Terraform and CloudFormation to maintain secure infrastructure configurations.
Implement and enforce security policies using Open Policy Agent (OPA) and Gatekeeper.