Infrastructure Security Engineer

Empresa: Factorial HR
Provincia: presencial
Población: 
Descripción: Hey there, Cybersecurity Enthusiasts! Factorial is looking for a skilled and experienced Infrastructure Security Engineer to join our team and reinforce the end-to-end security management of our systems and cloud environments. In this role, you will be the guardian of our core foundations, taking full ownership of infrastructure security from risk assessment and vulnerability management to proactive defense and incident response. As a key member of the Security Team, you will ensure that our global infrastructure remains resilient, compliant, and secure. You’ll work closely with SRE and IT teams to maintain a strong security posture, implementing hardening strategies and managing the entire lifecycle of infrastructure risks. The Mission: End-to-End Infrastructure Management: Drive the security strategy for our cloud environments, ensuring security is baked into the architecture from day one. Detection and Response: Continuously monitor security alerts and incidents. Conduct thorough incident response and detailed investigations to identify root causes within the infrastructure stack. Vulnerability and Risk Management: Lead the identification, assessment, and remediation of infrastructure vulnerabilities. Maintain the infrastructure risk register and prioritize mitigation efforts based on business impact. Hardening and Resilience: Implement and maintain rigorous hardening strategies across our infrastructure to increase resilience against sophisticated cyberattacks. AI, Tooling and Automation: Develop and manage infrastructure security tooling (CNAPP, CSPM, Vulnerability Scanners) to ensure accurate threat detection and automated compliance. Secure Delivery Pipelines: Secure the infrastructure and runners within our CI/CD pipelines, ensuring the environment where code is built and deployed is protected. Collaboration: Partner with Infra, IT, DX and SRE teams to integrate infrastructure security best practices and automate security controls. Strategy and Documentation: Develop, maintain, and regularly update incident response plans and infrastructure security policies. Your Profile: 5+ years of experience in Infrastructure Security or Security Engineering, specifically within Cloud environments, Infrastructure as Code, and Containerization (Kubernetes). Tooling Proficiency: Experience using and managing EDR, CNAPP, DLP, SIEM, and vulnerability management solutions. Threat Knowledge: Strong understanding of Cyberattacks and Threat Actor Tactics, Techniques, and Procedures (TTPs) related to infrastructure and cloud escape. Vulnerability Management Expert: Deep experience managing enterprise-grade vulnerability scanning and risk prioritization workflows. Infrastructure Specialist: Strong understanding of network security, OS hardening (Linux/Unix), and identity management (IAM). Automation Mindset: Proficiency in scripting and automation using Python, Bash, and AI, to streamline SOC operations. Education: Bachelor´s degree in C...
Tecnologías: Cloud, Infrastructure as Code, Kubernetes, EDR, CNAPP, DLP,
Tipo de Contrato: Indefinido
Salario: Sin especificar
Experiencia: Más de 5 años
Funciones: DevOps
Descubre más: https://www.tecnoempleo.com/infrastructure-security-engineer/cloud-infrastructure-code/rf-8eb11217a219a35a0e42