SOC Engineer/Architect (100% Remote)

Key Responsibilities:

Kubernetes Infrastructure & Deployment Security:

• Secure Kubernetes clusters, containerized workloads, and cloud-native applications.
• Implement secure CI/CD pipelines to enforce security policies in deployments.
• Conduct Kubernetes security hardening, RBAC configuration, and audit logging.
• Work with open-source security tools to monitor, detect, and remediate vulnerabilities.
• Be a builder of security infra NOT a user

DevSecOps & Automation:

• Develop automated security workflows using Python, Ansible, and GitHub Actions.
• Integrate container security tools (e.g., Trivy, Falco, Anchore, Open Policy Agent (OPA)).
• Implement infrastructure-as-code (IaC) security using Ansible and Terraform.
• Automate compliance checks and enforce security guardrails in CI/CD processes.

Security Monitoring & Incident Response:

• Utilize Wazuh, Teleport, and OpenCTI for security monitoring, threat detection, and log analysis.
• Set up intrusion detection and SIEM solutions for Kubernetes environments.
• Respond to security incidents, conduct forensic analysis, and implement remediations.

Database & Network Security:

• Secure PostgreSQL and MariaDB databases with encryption, access control, and monitoring.
• Implement network security controls, including firewall rules, Zero Trust principles, and intrusion detection.
• Perform regular vulnerability scans and penetration testing to identify security gaps.