Security Engineer Cloud Security & Kubernete

Job: Security Engineer Cloud Security & Kubernetes

Location: Frisco, Texas / Onsite

Please send your resume to:

1. 5+ years of experience in Information Security
2. 4+ years of experience in Cloud Security
3. 3+ years of experience in Cloud Container Security

Required Skills:

1. Deep understanding of cloud computing principles, including virtualization, containerization, microservices, and serverless computing
2. Risk Management, RHCOS security, container security, Kubernetes security, IAM security, network security, auditing, encryption, secrets management, and data protection
3. Securing CI/CD
4. Analyze environments to identify both technical and operational challenges while making recommendations and developing solutions for improvement
5. Lead complex or high severity troubleshooting and incident/problem resolutions with other security or cloud teams
6. Maintain knowledge of current developments in cloud, CaaS, and cybersecurity, maintaining awareness of threats to IT environments
7. Bachelor's degree in IT, Cybersecurity, or a related field or equivalent experience
8. Experience with cloud infrastructure as code tools such as Terraform, CloudFormation, and Azure Resource Manager
9. Observability: Tracing/Metrics/Logs and Dashboards for Platform and Application workloads (Prometheus, Grafana, Vector Openshift logging)
10. Experience working in DevSecOps, including knowledge and experience enforcing a secure software development lifecycle (GitHub, Gitea, Gitguardian)
11. Experience with static container scanning (Trivy, Snyk)
12. sBOM (Bill of Material): Syft/Grype
13. Experience with runtime container security (Falco, Red Hat ACS)
14. Experience with Red Hat OpenShift and OpenStack cloud platforms
15. Advanced cluster security, Advanced cluster management
16. Experience with Policy/Regulation compliance: OPA, Red Hat ACS, Kyverno
17. Strong knowledge of hybrid cloud, AWS, GCP, Azure, and Kubernetes Service Mesh isolation
18. Vulnerability and threat management
19. Application penetration testing
20. Hands-on experience with HashiCorp Vault, CyberArk, or similar (PAM, secrets, certificate management platform)
21. Professional certifications: CISSP, CEH, CDP (Certified DevSecOps Professional)