Cloud Security Engineer

Time zones: EST (UTC -5), CST (UTC -6), MST (UTC -7), PST (UTC -8), AKST (UTC -9), HST (UTC -10), AST (UTC -4), NST (UTC -3:30)

We’re a venture-backed startup on the verge of creating a new category we’re calling the Family Operating System™, and we want you on our team. At Trustworthy our mission is to keep families organized and prepared for the unexpected by delivering a secure and beautiful online service that keeps their most important information up-to-date and accessible. Trustworthy is the family’s single destination point for everything from financial accounts, life insurance policies, and estate documents to family stories, traditions, and passport numbers.
We are seeking a seasoned Security Engineer who is a self-starter, can document their own work, communicate well with the team and is passionate about leading dev ops and wants to have fun on a team with resources and a desire to grow.
Responsibilities
Triage reports from our security monitoring tools with the engineering team
Build and maintain scalable high-quality backend services and productivity tools
Maintain a strong security awareness through frequent assessments and software architecture design processes
Build automation to continuously assess security risks around our AWS cloud infrastructure and further SaaS tools we integrate with like GitHub
Proactively work to identify areas for performance gains including data and scaling challenges
Define security requirements (encryption, backups, data retention, etc.) together with our backend and web teams and automate their enforcement
Design, create and support security tests in CI/CD pipelines, to include IAST, SAST, DAST, container scanning, API scanning, and secret detection
Support new projects and features early in the process with your expertise; Create security requirements and test cases where needed
Apply security to cloud technologies (Managing secrets, Securing CD pipeline, Secure Infrastructure as Code, Container Security etc.)
Improve our cloud security configurations through active Terraform improvements and reviews and patch management
Requirements
Exceptional operational troubleshooting capabilities
Process-oriented with great documentation skills
3+ years overall AWS experience
3+ years of hands-on experience with Infrastructure as Code, preferably with Terraform and CloudFormation
2+ years of hands-on experience of programming in languages such as Python, Javascript, Go or similar
Experience with automating cloud-native technologies, deploying applications, and provisioning infrastructure
Good knowledge of Linux Basics and networking fundamentals, IP routing, load balancing and firewalls, VPN, DNS
At least 2-year experience as a SecOps engineer, security engineer, senior reliability engineer, working in a Security Operations Center (SOC), or equivalent education
Infrastructure as Code experience (e.g., Terraform)
Have at least 1-year experience working with AWS SecurityHub or equivalent
Experience with understanding CVEs and remediating security vulnerabilities