Secops / Security Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Secops / Security Engineer based in United States.

This role is focused on building and securing large-scale Kubernetes and cloud-native infrastructure in a highly technical environment.
You will design and implement security controls across containerized workloads, CI/CD pipelines, infrastructure, databases, and networks.
The position combines security engineering, DevSecOps, automation, monitoring, and incident response.
You will build security infrastructure and tooling rather than simply operate existing solutions, with a strong emphasis on automation and open-source technologies.
Working across engineering and security functions, you will strengthen detection, prevention, compliance, and response capabilities.
This is a fully remote, long-term contract opportunity for an experienced security engineer who enjoys solving complex infrastructure security challenges.

• Secure Kubernetes clusters, containerized workloads, and cloud-native applications through hardening, RBAC configuration, audit logging, and security controls.
• Design and implement secure CI/CD pipelines that enforce security policies, compliance requirements, and deployment guardrails.
• Build and integrate open-source security tooling to monitor, detect, and remediate vulnerabilities across infrastructure and applications.
• Develop automated security workflows using Python, Ansible, GitHub Actions, and related technologies.
• Integrate container security solutions such as Trivy, Falco, Anchore, and Open Policy Agent (OPA).
• Implement infrastructure-as-code security controls using Ansible and Terraform.
• Automate compliance checks and security enforcement throughout development and deployment processes.
• Configure and operate security monitoring and threat detection capabilities using technologies such as Wazuh, Teleport, OpenCTI, and Splunk.
• Develop and support SIEM and intrusion detection solutions for Kubernetes environments.
• Respond to security incidents, perform forensic analysis, identify root causes, and implement effective remediation measures.
• Secure PostgreSQL and MariaDB environments through encryption, access controls, monitoring, and other database security practices.
• Implement network security controls, including firewall policies, Zero Trust principles, and intrusion detection.
• Conduct vulnerability assessments and penetration testing to identify and address security gaps.

Requirements:

• 5+ years of professional experience in security engineering, particularly within large-scale infrastructure environments.
• Strong hands-on experience with Kubernetes and container orchestration.
• Advanced Linux system administration skills.
• Extensive knowledge of relational and NoSQL databases, including experience with Elasticsearch or similar technologies.
• Advanced Splunk expertise for monitoring, incident response, security analysis, and SOC integration.
• Strong Python development, scripting, and automation skills.
• Demonstrated experience building, developing, and integrating open-source security tools.
• Proven experience automating SOC processes and streamlining incident response workflows.
• Strong knowledge of DevSecOps principles, CI/CD security, infrastructure as code, and automated security controls.
• Hands-on experience with technologies such as Ansible, Terraform, and GitHub Actions.
• Experience with container security and tools such as Trivy, Falco, Anchore, or OPA.
• Knowledge of security monitoring, SIEM, threat detection, vulnerability management, and incident response.
• Experience securing PostgreSQL and MariaDB databases, as well as network infrastructure.
• Ability to build security infrastructure and automation rather than solely operate pre-existing security solutions.
• Strong problem-solving, communication, and collaboration skills.

Benefits:

• 100% remote work.
• Long-term contract opportunity.
• W2 contract structure.
• Opportunity to work on large-scale Kubernetes and cloud-native security infrastructure.
• Hands-on exposure to open-source security technologies and modern DevSecOps practices.
• Opportunity to build and automate security capabilities across infrastructure, applications, and SOC processes.