Senior Infrastructure Security Engineer
Lehi, Utah, Open to Remote
Podium
Podium helps local businesses get more customers and give them better experiences with easy-to-use growth, communication, and payment tools.Podium exists to help local businesses win. Using Podium’s technology, local businesses are able to simplify the way they build their business and modernize the way they communicate with their customers – from collecting payments, facilitating online reviews, launching marketing campaigns, and much more.
Our work and focus on local business and helping them to build thriving businesses has been recognized across the industry, including Forbes’ Next Billion Dollar Startups, Forbes’ Cloud 100, the Inc. 5000 (#13), and Fast Company’s World’s Most Innovative Companies. For more about our product, watch this video. Podium has a positive, inclusive, and supportive culture and was recently named one of Inc. Magazine’s Best Workplaces for 2021 (4 years in a row). We look for people who are curious, creative and are willing to do the work to be a little better every day. We also embody our company values in all that we do, which always starts with being Customer Obsessed, followed by Be a Founder, Zero Drama, and Enjoy the Ride.
We are looking for a Senior Infrastructure Security Engineer to help build and maintain solutions that will help keep our Cloud environment secure and compliant. Our ideal candidate has a passion for security and is a self-driven individual who proactively pursues and develops creative solutions to complex problems. We’re looking for someone who is thoroughly familiar with the operations of Kubernetes and cloud environments, who can use that strong contextual knowledge to architect strong perimeter and defense-in-depth strategies and vulnerabilities, and knows how to architect a robust and hardened solution resilient to attackers. We’re looking for self-driven individuals that build strong relationships, are meaningful team players, are transparent with others, and have strong problem analysis skills. This position will join the Infrastructure Security team at Podium; working closely with our engineering team to help secure our rapidly expanding cloud environment.
What you will be doing:
- Develop, evangelize, and monitor the adoption of sound cloud security practices
- Develop new, and review/update existing configurations of Podium’s infrastructure to improve our security posture
- Ownership and management of preventative security measures and services related to Podium, i.e. WAF, HIDS, Vulnerability Scanners, Cloud Security Scanners, etc…
- Identify security gaps in our visibility and infrastructure security processes, and develop solutions and project plans to address those gaps
- Conduct risk assessments of all major cloud infrastructure endpoints and spearhead projects to mitigate those risks
- Providing understandable and transparent rationale for security decisions to all stakeholders
- Attend an annual security conference (i.e., DEF CON, Blackhat, SAINTCON)
What you should have:
- Minimum of 5+ years of experience securing Cloud Infrastructure
- 1+ years of SRE/DevOps/Cloud Infrastructure management experience
- Experience with infrastructure security tools such as Cloudflare, GuardDuty, and other IDS solutions
- Vulnerability management experience for container and host-based vulnerabilities
- Experience with containerized environments, preferably Kubernetes
- An understanding of microservice oriented architecture and the associated security best practices
- Strong Linux system administration experience
- Familiarity with AWS Cloudtrail and AWS Config
- Familiarity with common host-based vulnerabilities and insecure cloud configurations
What we hope you have:
- SIEM experience with a solution like SumoLogic or Splunk
- Basic scripting skills, preferably in Python
- AWS/Kubernetes penetration testing experience
- Been an active member in the security community (e.g. OSS Contributions, OWASP, conference talks, CTFs, etc.)
BENEFITS
- Remote first work setting for Engineering & Product
- Great opportunities for career growth
- 401k with a competitive matching contribution plan
- Unlimited Vacation (yes, we want you to have a work-life balance)
- Great medical, dental, vision benefits
- Yearly home office upgrade stipend
- Yearly team building on-site events at HQ in Utah
- Multiple internal hackathons a year
- Life insurance, long and short-term disability coverage
- Paid maternity and paternity leave
- Swag
Podium is an equal opportunity employer. Podium provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, national origin, sexual orientation, gender identity or expression, age, disability, genetic information, marital status or veteran status.
Tags: AWS Cloud Cloudflare DevOps IDS Kubernetes Linux OWASP Pentesting Python Scripting SIEM Splunk Vulnerabilities Vulnerability management
Perks/benefits: 401(k) matching Health care Home office stipend Insurance Medical leave Parental leave Team events Unlimited paid time off
More jobs like this
Explore more InfoSec / Cybersecurity career opportunities
Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.
- Open Senior Security Analyst jobs
- Open Information Security Specialist jobs
- Open Cyber Security Architect jobs
- Open Senior Cyber Security Engineer jobs
- Open Manager Pentest H/F jobs
- Open Staff Security Engineer jobs
- Open Senior Information Security Analyst jobs
- Open Cyber Security Specialist jobs
- Open Principal Security Engineer jobs
- Open Product Security Engineer jobs
- Open Information Systems Security Officer (ISSO) jobs
- Open Cybersecurity Analyst jobs
- Open Consultant infrastructure sécurité H/F jobs
- Open IT Security Analyst jobs
- Open Consultant SOC / CERT H/F jobs
- Open Cybersecurity Consultant jobs
- Open Chief Information Security Officer jobs
- Open Senior Information Security Engineer jobs
- Open Security Specialist jobs
- Open Cybersecurity Specialist jobs
- Open Senior Penetration Tester jobs
- Open Sr. Security Engineer jobs
- Open Security Researcher jobs
- Open Senior Security Architect jobs
- Open Security Operations Analyst jobs
- Open CISM-related jobs
- Open ISO 27001-related jobs
- Open Network security-related jobs
- Open Windows-related jobs
- Open Application security-related jobs
- Open Agile-related jobs
- Open Pentesting-related jobs
- Open Vulnerability management-related jobs
- Open GCP-related jobs
- Open Analytics-related jobs
- Open SaaS-related jobs
- Open CISA-related jobs
- Open IAM-related jobs
- Open Threat intelligence-related jobs
- Open APIs-related jobs
- Open Java-related jobs
- Open Security assessment-related jobs
- Open DevOps-related jobs
- Open Security Clearance-related jobs
- Open Kubernetes-related jobs
- Open Malware-related jobs
- Open CI/CD-related jobs
- Open IDS-related jobs
- Open DevSecOps-related jobs
- Open CEH-related jobs