Key skills
CloudFirewallsKubernetesLinuxAWSAzureGCPK8sHelmArgoCDGitOpsCI/CDTrivyOWASPWAF
About this role
Role Overview
- Design, implement, and maintain security controls across our cloud-native infrastructure and Kubernetes platforms
- Establish and enforce Kubernetes security best practices, including RBAC, Network Policies, and secrets management
- Perform security assessments and hardening of Kubernetes environments
- Implement and maintain secure GitOps workflows using Helm and ArgoCD
- Integrate security controls into CI/CD pipelines
- Deploy, manage, and optimize security monitoring and threat detection solutions
- Manage container and infrastructure vulnerability scanning using Trivy
- Deploy, configure, and maintain Wazuh for security monitoring, log analysis, and compliance reporting
- Conduct application security assessments aligned with OWASP Top 10 recommendations
- Support security audits, compliance initiatives, and risk assessments
Requirements
- Strong hands-on experience with Kubernetes (K8s) administration and security
- Experience with Helm and ArgoCD in production environments
- Experience implementing GitOps and securing CI/CD pipelines
- Expertise in Falco for runtime threat detection and monitoring
- Experience with Trivy for vulnerability scanning and container security
- Hands-on experience with Wazuh SIEM/XDR platform
- Strong understanding of Web Application Firewalls (WAF) and OWASP Top 10 security risks
- Knowledge of container security, image hardening, and Kubernetes workload protection
- Experience with Linux system administration and security hardening
- Familiarity with Infrastructure as Code and automation practices
Tech Stack
- Cloud
- Firewalls
- Kubernetes
- Linux
Benefits
- Fully remote
- Work alongside SRE, Platform Engineering, or DevOps teams
- Security certifications such as: CKS (Certified Kubernetes Security Specialist), CKA (Certified Kubernetes Administrator), CISSP, GSEC, Security+
- Experience with cloud platforms (GCP, AWS, or Azure)