Senior Devops Security Engineer, Spotter

• 5+ years of experience as a DevOps Engineer
• 5+ years of combined experience developing in any of the following languages: C++, Java, Python
• 5+ years of experience developing and deploying scalable systems based in one of the following Cloud platforms: Amazon AWS, Google GCP, Microsoft Azure
• 3+ years of experience application security
• Experience extending and supporting Cloud based monitoring tools such as AWS Cloud Watch, Datadog, LogicMonitor, Nagios, Splunk
• Experience managing remote workforce computing devices based on established Cybersecurity and Data Protection best practices
• Ability to identify security requirements, pinpoint security threats and potential vulnerabilities, quantify threat and vulnerability criticality, and prioritize remediation methods
• Subject matter expert on Application Security: Secure Software Development Lifecycle (SSDLC), threat modeling, secure coding, SAST, DAST, and vulnerability management. This includes regularly scheduled pen-testing of AWS infrastructure in preparation for ISO27001 certification
• Strong proficiency with AWS cloud infrastructure services and the integration of these services, Infrastructure as Code (Terraform, CloudFormation) principles, CI/CD methodologies, and containerization (Docker)
• Knowledge of auto-scaling best practices & policies to ensure responsive and cost-effective application performance
• Strong written and verbal communication skills

Desirable

• Spotter is seeking a DevOps Security Engineer to join our world-class infrastructure team
• As a DevSecOps engineer, you will be responsible for integrating security into the software development process and for creating a more robust security system
• Monitor and identify potential security threats & risks, ensuring compliance with security standards and regulations
• Develop strategies to mitigate risks by identifying potential entry points into the system, test the effectiveness of existing security measures, adding countermeasures to prevent against new threats and implementing security controls
• You will also collaborate with Software Engineers, Data Scientists, and Product Managers to enable and ensure that security is considered at every stage of the development process
• This role also requires comprehensive expertise in cloud technologies, Infrastructure as Code (IaC), CI/CD principles, Security best practices and a strong foundation in AWS and coding security
• Develop and support Continuous Integration (CI) pipelines for automated deployment of data pipelines and highly available SaaS products. Applications are written in Python using AWS-native infrastructure and tools, including SageMaker, Lambda functions, API Gateway, Kubernetes (ECS, EKS) etc; and deployment of AI/ML models that are embedded into web applications and data science workflows
• Design and implement GitHub configurations, including runners, executors, and workflows through Terraform, to enhance our software development and security operations processes
• Develop Infrastructure as Code (IaC): Advocate and lead IaC initiatives using Terraform, promoting automation and consistency in infrastructure deployments. Goal is to eliminate all console access by 80%
• Docker & Docker Machine Management: Oversee Docker images and containers, ensuring they meet application requirements and are optimized for performance
• Auto-scaling Mastery: Refine auto-scaling rules and policies to maintain responsive and cost-effective applications
• Perform analysis, design, develop and implementation activities to install, configure and maintain infrastructure, software and components, Infrastructure as Code (IaC) and Configuration as Code (CaC), for deployments
• Perform activities to ensure alignment of use cases and objectives with architecture and security
• Establish and implement health and performance monitoring metrics and alarms for production systems using CloudWatch, DataDog, or equivalent