Secops / Security Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Secops / Security Engineer based in United States. This role is focused on building and securing large-scale Kubernetes and cloud-native infrastructure in a highly technical environment. You will design and implement security controls across containerized workloads, CI/CD pipelines, infrastructure, databases, and networks. The position combines security engineering, DevSecOps, automation, monitoring, and incident response. You will build security infrastructure and tooling rather than simply operate existing solutions, with a strong emphasis on automation and open-source technologies. Working across engineering and security functions, you will strengthen detection, prevention, compliance, and response capabilities. This is a fully remote, long-term contract opportunity for an experienced security engineer who enjoys solving complex infrastructure security challenges.

Secure Kubernetes clusters, containerized workloads, and cloud-native applications through hardening, RBAC configuration, audit logging, and security controls. Design and implement secure CI/CD pipelines that enforce security policies, compliance requirements, and deployment guardrails. Build and integrate open-source security tooling to monitor, detect, and remediate vulnerabilities across infrastructure and applications. Develop automated security workflows using Python, Ansible, GitHub Actions, and related technologies. Integrate container security solutions such as Trivy, Falco, Anchore, and Open Policy Agent (OPA). Implement infrastructure-as-code security controls using Ansible and Terraform. Automate compliance checks and security enforcement throughout development and deployment processes. Configure and operate security monitoring and threat detection capabilities using technologies such as Wazuh, Teleport, OpenCTI, and Splunk. Develop and support SIEM and intrusion detection solutions for Kubernetes environments. Respond to security incidents, perform forensic analysis, identify root causes, and implement effective remediation measures. Secure PostgreSQL and MariaDB environments through encryption, access controls, monitoring, and other database security practices. Implement network security controls, including firewall policies, Zero Trust principles, and intrusion detection. Conduct vulnerability assessments and penetration testing to identify and address security gaps. Requirements: 5+ years of professional experience in security engineering, particularly within large-scale infrastructure environments. Strong hands-on experience with Kubernetes and container orchestration. Advanced Linux system administration skills. Extensive knowledge of relational and NoSQL databases, including experience with Elasticsearch or similar technologies. Advanced Splunk expertise for monitoring, incident response, security analysis, and SOC integration. Strong Python development, scripting, and automation skills. Demonstrated experience building, developing, and integrating open-source security tools. Proven experience automating SOC processes and streamlining incident response workflows. Strong knowledge of DevSecOps principles, CI/CD security, infrastructure as code, and automated security controls. Hands-on experience with technologies such as Ansible, Terraform, and GitHub Actions. Experience with container security and tools such as Trivy, Falco, Anchore, or OPA. Knowledge of security monitoring, SIEM, threat detection, vulnerability management, and incident response. Experience securing PostgreSQL and MariaDB databases, as well as network infrastructure. Ability to build security infrastructure and automation rather than solely operate pre-existing security solutions. Strong problem-solving, communication, and collaboration skills. Benefits: 100% remote work. Long-term contract opportunity. W2 contract structure. Opportunity to work on large-scale Kubernetes and cloud-native security infrastructure. Hands-on exposure to open-source security technologies and modern DevSecOps practices. Opportunity to build and automate security capabilities across infrastructure, applications, and SOC processes.

laptop-ats-crawler v3