Security Operations Engineer (Contract)

We are seeking a dynamic and skilled Security Operations Engineer with expertise in Qualys with a strong DevOps background, to join our dedicated Endpoint Security team. This role is essential in ensuring our security posture is robust, scalable, and integrated seamlessly with our office locations and platform.

You will play a pivotal role in maintaining and improving the security of our IT infrastructure. The ideal candidate will have a deep understanding of cloud and security software deployments. This role involves working closely with a large number of internal teams to implement the endpoint security software stack

Key Responsibilities:

Cloud Security Integration:

• Integrate security tools and practices into containerized environments
• Develop and maintain infrastructure as code
• Design and maintain scripts for system automation

Qualys Deployment & Management:

• Lead integration of Qualys components such as container security sensors, cloud connectors, container registry scanning
• Deploy and configure Qualys tools to ensure comprehensive vulnerability management across the organization
• Maintain and update Qualys configurations to align with evolving security policies and compliance requirements
• Develop processes to monitor newly integrated systems and enable data collection, integration monitoring and alerting

DevOps Integration:

• Collaborate with IT and business SRE teams to integrate security technologies successfully
• Collaborate at all levels of the engineering process, including analysis, development, documentation, integration and testing

Qualifications:

Education & Experience:

• Bachelor's degree in computer science, Information Technology, or related field
• 3+ years of experience in a security operations role with a focus on cloud security and large scale technology deployments

Required Skills:

• Knowledge of cloud software packaging, distribution, and configuration
• Excellent knowledge of cloud technology and microservices such as Amazon Web Services, Google Cloud Platform, Azure, Kubernetes and its implementations within cloud providers (ECS, EKS, GKE, etc.)
• Experience with version control systems such as Git and platforms like GitHub and GitLab in a development environment
• Knowledge of orchestration tools such as Ansible, Puppet, Chef, or SaltStack
• Proficiency in scripting languages such as Python, Bash, PowerShell, or Ruby

Desired Skills:

• Proficiency in deploying and managing Qualys vulnerability management solutions, including implementation of Cloud Connectors, Total Cloud and Container Security modules, Network Scanners
• Familiarity with Infrastructure as Code (IaC) principles and practices, including experience with CloudFormation, packer, terraform
• Solid understanding of network security, cloud security, and application security principles
• Familiarity with regulatory requirements and compliance standards (e.g., GDPR, SOX, PCI-DSS)

#LI-GM1