Senior Security Engineer at DotModus

Scope:

DotModus, industry-specific, scalable cloud solutions and Premier Google Partner, are looking for a Senior Security Engineer. You will make things more secure by protecting system boundaries, keeping computer systems and network devices hardened against attacks and securing highly sensitive data.

Responsibilities:

• Codification and automation of security assurance across all layers of the stack (Application, Integration, Cloud Hosting and DevOps).
• Work with the lead and domain engineers to formulate solutions in line with business goals and security principles.
• Define, document and implement security assurance engineering solutions.
• Embedding security assurance automation into DevOps and CI/CD.
• Provide hands-on support during investigations and PoCs.
• Take solution ownership from inception to delivery.
• Embedding security into Agile (DoR, DoD, user stories, acceptance criteria etc.).
• Contributing to security engineering patterns to be applied across multiples cloud providers and technologies.
• Preparing engineering artifacts.
• Reviewing configurations and Infrastructure as Code for security weaknesses.
• Supporting architects take designs through appropriate governance and sign-off.
• Act as an SME for security engineering related topics and issues.
• Contributing to Threat Models.
• Promote ‘security is codified’ ethos when engaging feature teams and Dev‐Ops teams.

Candidate Profile:

• Deep functional experience in penetration testing, threat modeling, scripting, and test automation.
• A strong platform, scripting, and automation experience.
• Demonstrable experience developing re-usable security patterns, guidance, and scripts.
• DevOps toolchain integration experience.
• Experience implementing solutions aligned to industry standards e.g. ISO27001, NIST, etc. in a large organisation.
• Experience delivering projects using one or more cloud providers e.g. AWS, Azure or GCP.
• Working knowledge of GDPP.
• Experience securing Big Data solutions and customer-facing Web Applications.
• Detailed knowledge across a broad range of security domains.