DevSecOps SR Blue Team

Acerca de Tul
TÜL es una plataforma tecnológica que optimiza la cadena de suministro de materiales de construcción para las ferreterías en LATAM. Nuestro objetivo es permitir a las ferreterías competir con los grandes jugadores, tener un mejor negocio y más rentabilidad.
Estamos creciendo exponencialmente y persiguiendo su visión de convertirse en la primera y más grande super app para la industria de la construcción y ferretería. 
Respaldada por VCs de primer nivel en Silicon Valley y Latinoamérica, actualmente con operaciones en Colombia, México y Brasil. Buscamos jugadores de primer nivel en cada posición para hacer de Tul la mejor empresa de la región.
Perseguimos un gran sueño: Ser la primera y más grande súper app para la industria de la construcción. 
The RoleThe position has a strong focus on: Cloud Security (AWS) with the philosophy of DevOps (Devops+Sec), and strong skills in web security, vulnerabilities, computer risks, knowledge of network security and with the ability to assess the security of the code of a project and to attend in time and form any security incident and solve it.
About the teamWe are tightly working with the Devops and infrastructure team to provide a fully automated solution, always using the latest and best technologies. We are always oriented to give solutions without bureaucracy. Always brainstorming to solve any challenges, we are open about opinions and serious proposals.
Skills required2+ years of experience in cybersecurity positionsInfrastructure security solutions(WAF,FW,SIEM)Knowledge of security testing tools DAST, SASTKnowledge of secure developmentKnowledge in security control automatizationKnowledge in agile methodologiesKnowledge of Best Security PracticesKnowledge of Cloud ArchitectureKnowledge of PythonKnowledge of AWSYou will possess the ability to respond quickly to new and emerging security threats and vulnerabilities, investigate suspected attacks and help manage security incidents including providing post-mortem analysis, identify causes, develop solutions and preventive measures.Strong analytical and problem-solving skillsExcellent communication skills

It’s a plusKnowledge of security frameworks such as NIST,CIS, ISO 27001,PCI,etcKnowledge in DevOps and GitOps PracticesContainer orchestration(kubernetes,docker)Collaboration tools(jira,confluence)Configuration and Iac languages such as terraform and ansible