Software Security Engineer at Superbalist.com

Our ideal candidates have a passion for technology, they are constantly exploring, learning and improving their skills. They know where to apply what they have learned and they share their knowledge freely. We embrace fit for purpose technology, meaning we have a diverse stack. Just like our culture, we obsess about building systems that are elegant, performant, reliable and scalable. Our teams are autonomous, collaborative units that share a business and engineering vision, but have the freedom to tweak and influence how they go about their mission.

Your mission, should you choose to accept it:

• Architecting and implementing technical solutions to support defensive security
• Mentoring and coaching security within the organisation
• Deploying, operating, and monitoring SIEM, IPS/IDS, UEBA, etc.
• Responding to Security Incidents
• Expanding security auditing and monitoring capabilities
• Developing custom applications to monitor red flag situations
• Working with SRE to secure the platform, hardening servers, networks, Kubernetes
• Working with Application teams to secure code, consulting on implementations
• Hardening servers, and building security into the platform
• Developing automation so we can focus on the hard problems
• Developing glue code to extend or integrate systems

The skills we need:

• Is passionate about technology and security
• Is curious, always learning, and keeps up to date with the industry
• Is a team player, an active listener, mentor, and able to communicate well
• Shows solid reasoning and decision making
• Possesses the ability to work under pressure

Qualifications & Experience:

• A Formal Qualification/Degree in Computer Science or at least 5 years of professional experience in a similar role 
• Solid, working understanding of web technologies (HTTP, HTTPS, SSL, TLS)
• Solid, working understanding of Networking (TCP, UDP, IP, nmap, wireshark, etc.)
• Experience with WAF (Cloudflare)
• Experience with Google Cloud, or another cloud provider
• Experience with Kubernetes, Docker, or containers in general
• Experience with ElasticSearch, Kibana, Grafana
• Experience with Build Systems (Jenkins)
• Experience with defensive systems (SIEM, IDS/IPS, Canaries, Fail2Ban, etc.)