Cloud Security Engineer

Aqua Security, a pioneering force in the dynamic cloud-native security sector, is actively seeking a skilled DevSecOps/Cloud Security Engineer to join our vibrant Security team.

At Aqua, we foster a culture that values innovation, collaboration, and individual growth, offering an unparalleled opportunity for professionals looking to play a pivotal role in the digital transformation of the world's leading organizations through containers, Kubernetes, and serverless technologies.

As a DevSecOps Engineer at Aqua Security, you will play a critical role in devising, implementing, and maintaining robust security controls for Aqua's software solution suite. Leveraging our state-of-the-art security tools and solutions, you will contribute to fortifying applications, the software supply chain, CI/CD pipelines, and production environments. The ideal candidate will possess a profound understanding of container and Kubernetes security, cloud security, and securing native cloud workloads.

Key Responsibilities:

• Lead the development, promotion, and oversight of robust cloud security practices tailored for Aqua's cloud infrastructure, focusing on containerized environments.
• Proactively identify and rectify security issues, misconfigurations, and vulnerabilities within Aqua's SaaS, container, and Kubernetes infrastructure.
• Collaborate seamlessly with engineering, DevOps, and SRE teams to seamlessly integrate security best practices into the DevOps pipeline.
• Establish and supervise security controls for Kubernetes (K8s) environments, conducting comprehensive assessments and implementing threat modeling for a resilient defense.
• Guide threat modeling exercises, concentrating on cloud-native, SaaS, GitOps infrastructure, and cloud-first technologies.
• Deploy and manage access controls and identity solutions within cloud environments.
• Demonstrate adept collaboration skills in a dynamic environment, emphasizing robust problem-solving and effective communication.
• Ensure the security of the software supply chain, third-party components, and dependencies.

Requirements:

• Bachelor’s degree in computer science or a related field.
• Solid understanding of application security principles, practices, vulnerability management, and DevSecOps methodologies in a cloud-native environment.
• Foundational security engineering experience in AWS, GCP, or Azure, specifically with container and Kubernetes-based infrastructure.
• Minimum 4 years of experience in DevSecOps/Cloud Security.
• Proficiency in container and Kubernetes security, cloud security, IaaC, and securing native cloud workloads.
• Experience leading security operations functions, including vulnerability management, detection engineering, and incident response in CI/CD and cloud-native production environments.
• Background in developing and executing threat modeling, security design review, and implementation review programs for complex, multi-tenant systems hosted in cloud environments.
• Knowledge and experience in securing the software supply chain, third-party components, and dependencies.
• Excellent communication, interpersonal, and collaboration skills.
• Strong problem-solving skills and the ability to thrive in a fast-paced and dynamic environment.

Aqua stands as a global leader in cloud-native security, spearheading the digital transformation of major organizations worldwide. Join our team of cloud-native experts for unparalleled global opportunities and continuous career development.

If you are passionate about cloud security and eager to make a substantial impact in the cloud-native landscape, we invite you to apply and be a part of Aqua's exciting journey!