ТайваньSenior Cloud Security & Reliability Engineer, Virtual Insurance
вчера
ТайваньSenior
kubernetessiemcloud securityautomationlog managementsecurity posture managementiamnetwork security
Senior Cloud Security & Reliability Engineer focused on securing and maintaining cloud infrastructure and Kubernetes environments.
Требования
- At least 5 years of relevant experience in SRE, DevOps, cloud/platform engineering or security engineering, including at least 3 years implementing and troubleshooting security controls in production cloud environments.
- Strong hands-on experience with at least one major cloud platform (GCP, AWS or Azure) and working knowledge of a second platform.
- Practical experience in cloud security assessments, IAM, network security, cloud-native security services and cloud security posture management (CSPM).
- Experience operating and securing production Kubernetes environments such as GKE, EKS or AKS, including RBAC, workload identities, admission controls, network policies and container security.
- Hands-on experience integrating cloud telemetry with SIEM platforms, including log collection, event processing, troubleshooting and investigation queries.
- Proficiency in Python or equivalent programming languages, cloud APIs/SDKs, Terraform or similar infrastructure-as-code tools, Git and CI/CD pipelines.
- Strong Linux and networking troubleshooting skills, including DNS, TLS and connectivity, together with experience in monitoring, alerting and incident response.
- Understanding of SRE principles, including service-level indicators, service-level objectives and safe production changes.
- Strong troubleshooting, problem-solving, technical documentation and cross-team communication skills, with the ability to independently investigate issues and coordinate remediation.
- A relevant degree or equivalent practical experience is welcome.
Другое
- We are seeking a Senior / Site Reliability Engineer (Security) to strengthen the security, reliability and operational efficiency of our cloud infrastructure and Kubernetes environments.
- The role combines site reliability engineering knowledge, cloud security and automation with a focus on maintaining security monitoring platforms, integrating cloud telemetry into SIEM, assessing security posture and implementing scalable security controls.
- SIEM integration: Integrate cloud and Kubernetes audit, identity, network and workload telemetry into SIEM platforms. Manage log collection, parsing, normalization, retention and ingestion costs.
- Security Service Reliability: Maintain security tools, collectors and telemetry pipelines. Define service-level objectives, monitor availability and ingestion latency and implement operational automation.
- Cloud Asset Discovery: Automate cloud resource discovery across accounts, projects, subscriptions and regions. Maintain asset ownership, service dependencies and security assessment coverage.
- Cloud Security Posture Management: Assess IAM permissions, network exposure, storage security, encryption, secrets management and logging configurations. Identify and prioritize security risks.
- Kubernetes Security: Assess and harden Kubernetes clusters and workloads, including RBAC, workload identities, network policies, admission controls, container security and vulnerability remediation.
- Security Automation: Develop scripts, infrastructure-as-code configurations and CI/CD integrations to enforce security baselines, detect configuration drift and automate preventive controls.
- Detection and Incident Support: Support cloud security detection engineering, incident investigation, root-cause analysis and remediation validation. Maintain dashboards, technical documentation and operational runbooks.