Associate Security Engineer - Infrastructure
Wasabi Technologies
Other Engineering
Boston, MA, USA
Posted on Friday, May 17, 2024
Role Description: Associate Security Engineer - Infrastructure
Role Background:
As an Associate Security Engineer at Wasabi Technologies, you will bridge the gap between development and operations to ensure top-level security for our global cloud storage platform. You will enhance our security posture throughout the development cycle and in production across our data centers. Your role will involve deploying, configuring, and maintaining our security stack components, contributing to ongoing projects, and supporting team initiatives for alignment and knowledge sharing.
At Wasabi, we build and maintain our entire infrastructure from rack space and power to networking, Kubernetes clusters, and workloads. While your cloud security experience with AWS, Azure, or Google Cloud is highly relevant, expect a unique set of challenges here.
*Principals Only. No Recruiters.
Responsibilities:
- Administrate our SEIM solution by onboarding logs and normalizing data, create queries to provide insight in each.
- Identify the requirements to deploy new security tools, work with the appropriate teams to ensure tools are functioning properly and performing as expected.
- Oversight, maintenance, and advancement of vulnerability management systems, utilizing a combination of in-house tools and third-party resources.
- Working closely with the security and DevOps teams to assess, prioritize, analyze, and develop solutions for vulnerabilities found in Linux and application environments (including Go and JavaScript). Also, using Python, and Go to create and deploy new services.
- Manage security tickets from creating the tickets, assignment, to working with the teams to identify a path to resolution.
- Coordinate with IT on fleet management initiatives.
Requirements:
- 1+ years DevOps tool expertise and industry best practices, including vulnerability management, and endpoint detection and response.
- 2+ years of experience, with Linux, system administration, package management, proficiency with security tools, and hands-on TCP/IP networking.
- Experience with Infrastructure-as-Code or Configuration Management tools, such as Terraform
- Hands-on experience with Okta.
- Experience with monitoring & logging tools like Prometheus, Grafana, or Splunk is a plus.