The Role
We are currently seeking a Sr SecOps Engineer to design, implement and maintain suitable infrastructure and application security solutions on AWS public cloud environments using DevSecOps mindset. You will bring world class cloud-native security expertise to implement solutions for security configuration hardening, vulnerability management, detection, protection and monitoring of security threats and intrusions, in an automated fashion.
What You'll Do
Driving the design and implementation of defense-in-depth infrastructure and application security solutions for our customer facing SaaS platform in AWS public cloud environments
Driving architecture, implementation, configuration and automation of native and third party cloud security solutions for hardening, detection, prevention, logging and response solutions for security vulnerabilities and threats
Provide thought leadership with a security bent of mind to the organization
Working closely with Product, Engineering and IT in a DevSecOps model on technologies like FWs, ACLs, WAFs, IAM roles and permissions, Vulnerability management and hardening, Threat and Intrusion detection, Kubernetes Container Security solutions, Pen Test and endpoint security
Assisting in incident response and triaging activities as needed for security incidents and events
Using AI in security operations to streamline and optimize the security incident management, resolution.
What You'll Need
5-7 years of previous experience deploying and administering security infrastructure in AWS public cloud environments, using Infrastructure as Code required
In-depth hands-on experience with at least one public Cloud platform (AWS or GCP) with advanced knowledge of securing IaaS platforms and services like WAFs, Security Groups, EC2/Compute, EKS/GKE, ECR/GCR, S3/Cloud Storage, RDS/Cloud SQL, Logging and Monitoring
Prior experience working closely with Product, DevOps and CloudOps' Site Reliability Engineers on shift-left strategies, CI/CD tools and solutions needed
Experience working on DLP and endpoint security product is a big plus
Security experience in a cloud native environment in one or more areas: authentication, access management, API security, Linux security, vulnerability scanning, threat and intrusion detection, firewalls, WAF, encryption technologies, container security etc.
Experience using a programming language such as Python for automation (would be a plus)
Security certifications from AWS, GCP , CISSP, CEH, OSCP preferred
Skills Required
- 5-7 years deploying and administering security infrastructure in AWS public cloud environments using Infrastructure as Code
- Hands-on experience with at least one public cloud (AWS or GCP) and securing IaaS services: WAFs, Security Groups, EC2/Compute, EKS/GKE, ECR/GCR, S3/Cloud Storage, RDS/Cloud SQL, Logging and Monitoring
- Experience working with Product, DevOps, and CloudOps/SREs on shift-left strategies and CI/CD tools
- Security experience in cloud-native areas: authentication, access management, API security, Linux security, vulnerability scanning, threat and intrusion detection, firewalls, WAF, encryption, container security
- Experience with DLP and endpoint security products
- Experience using a programming language such as Python for automation
- Security certifications (AWS, GCP, CISSP, CEH, OSCP)
What We Do
Tala is a global technology company on a mission to build a financial system that works for everyone. More than 6 million people have borrowed through Tala’s smartphone app, which provides instant credit scoring, lending, and other personalized financial services in emerging markets. We are present in the United States, Kenya, Mexico, the Philippines and India.
Why Work With Us
We are on a global mission to serve the underserved. We use mobile technology and data science to make financial services simple, inclusive, and accessible. We are expanding across product offerings, countries and crypto and are looking for people who have an entrepreneurial spirit and are passionate about the mission.
Gallery
