Security Engineer - Infrastructure Security
Blockdaemon is looking for a talented Security Engineer who thrives on ambiguity and loves endless discovery. You will work with teams across the organization to identify, prioritize, and remediate vulnerabilities relevant to Blockdaemon’s infrastructure. You will build and maintain security tooling and services to support the expanding needs of our Security organization while using the widest array of technologies and working with bleeding edge applications.
Position Overview:
Assess, design, implement, automate, and document security solutions and processes for K8s, Public and Private Cloud environments, SaaS applications and other cloud platforms
Implement and tune detection logic for threats specific to Blockdaemon
Work closely with observability engineers to address any gaps in observability
Work with platform engineers on secure best practices in Infrastructure as Code, cloud design patterns and CI/CD with built in application security controls
Work on key areas to develop baseline cloud, container, and application security standards and integrate into the CI/CD pipeline
Implement security architecture, methods, and controls required to meet security, compliance, and audit requirements
Implement "security as code" using cloud services Terraform, and CI/CD components
Respond to and, when appropriate, resolve or escalate security incidents
Develop and maintain documentation for security systems and procedures
Investigate and resolve security violations by providing postmortem analysis to illuminate the issue, and identify causes, possible solutions, and preventative measures
Required Experience:
Minimum 4 years of experience as a Security Engineer or equivalent working experience
Significant technical experience in Cloud Computing technologies and automation
Ability to break down complex problems and implement custom solutions or scripts beyond just basics to demonstrate thoroughness of problem solving and automated security
Experience in DevOps environments working with and influencing developers to maintain security through CI/CD processes.
Experience working with container technologies including Docker and Kubernetes
Experience with the development, deployment, and automation of security solutions in an enterprise cloud-based environment
Knowledge of network based, system level, and application layer attacks and mitigation methods
Experience with or understanding of a broad range of security technologies including IDS/IPS, IAM, Certificate Management, etc.
Strong knowledge of technology and security topics including network and application security, infrastructure hardening, security baselines, web server, and database security
An understanding of identity federation, authentication, and authorization (SAML, OIDC, OAuth)
Apply Now
Apply Now
Position Overview:
Assess, design, implement, automate, and document security solutions and processes for K8s, Public and Private Cloud environments, SaaS applications and other cloud platforms
Implement and tune detection logic for threats specific to Blockdaemon
Work closely with observability engineers to address any gaps in observability
Work with platform engineers on secure best practices in Infrastructure as Code, cloud design patterns and CI/CD with built in application security controls
Work on key areas to develop baseline cloud, container, and application security standards and integrate into the CI/CD pipeline
Implement security architecture, methods, and controls required to meet security, compliance, and audit requirements
Implement "security as code" using cloud services Terraform, and CI/CD components
Respond to and, when appropriate, resolve or escalate security incidents
Develop and maintain documentation for security systems and procedures
Investigate and resolve security violations by providing postmortem analysis to illuminate the issue, and identify causes, possible solutions, and preventative measures
Required Experience:
Minimum 4 years of experience as a Security Engineer or equivalent working experience
Significant technical experience in Cloud Computing technologies and automation
Ability to break down complex problems and implement custom solutions or scripts beyond just basics to demonstrate thoroughness of problem solving and automated security
Experience in DevOps environments working with and influencing developers to maintain security through CI/CD processes.
Experience working with container technologies including Docker and Kubernetes
Experience with the development, deployment, and automation of security solutions in an enterprise cloud-based environment
Knowledge of network based, system level, and application layer attacks and mitigation methods
Experience with or understanding of a broad range of security technologies including IDS/IPS, IAM, Certificate Management, etc.
Strong knowledge of technology and security topics including network and application security, infrastructure hardening, security baselines, web server, and database security
An understanding of identity federation, authentication, and authorization (SAML, OIDC, OAuth)
Apply Now
Apply Now