Associate Security Engineer - Infrastructure
Wasabi Technologies
Other Engineering
Boston, MA, USA
Posted on Friday, May 17, 2024
Role Description: Associate Security Engineer - Infrastructure
Role Background:
As an Associate Security Engineer at Wasabi Technologies, you will bridge the gap between development and operations to ensure top-level security for our global cloud storage platform. You will enhance our security posture throughout the development cycle and in production across our data centers. Your role will involve deploying, configuring, and maintaining our security stack components, contributing to ongoing projects, and supporting team initiatives for alignment and knowledge sharing.
At Wasabi, we build and maintain our entire infrastructure from rack space and power to networking, Kubernetes clusters, and workloads. While your cloud security experience with AWS, Azure, or Google Cloud is highly relevant, expect a unique set of challenges here.
*Principals Only. No Recruiters.
Responsibilities:
- Ensure container security by implementing and maintaining solutions such as image scanning, static analysis, and dependency analysis within Continuous Integration pipelines. Additionally, focus on automating security controls and integrating them effectively
- Oversight, maintenance, and advancement of vulnerability management systems, utilizing a combination of in-house tools and third-party resources.
- Working closely with the security and DevOps teams to assess, prioritize, analyze, and develop solutions for vulnerabilities found in Linux and application environments (including Go and JavaScript). Also, using Terraform, Ansible, Python, and Go to create and deploy new services.
- Staying abreast of emerging security threats and trends to ensure up-to-date knowledge.
Requirements:
- 1+ years DevOps tool expertise and industry best practices, including vulnerability management, and endpoint detection and response.
- 2+ years of experience, with Linux, system administration, package management, proficiency with security tools, and hands-on TCP/IP networking.
- Experience with Infrastructure-as-Code or Configuration Management tools, such as Terraform
- Hands-on experience with Okta.
- Experience with monitoring & logging tools like Prometheus, Grafana, or Splunk is a plus.