Security Engineer

 

• Delivery

• SRE focuses on improving software delivery by improving the release management tooling and processes.

• They have a wide understanding of the system and application architecture and have a strong observability background.

• SRE approaches problems from the operational perspective and collaborates closely on finding an optimal solution that will safely and quickly deliver code to various supported environments.

• SREs are tasked with ensuring shortening the software delivery times by innovative solutions & methods to existing established tools and infrastructure.

• Scalability

• SRE focuses on the application side by improving the architecture as HighLevel continues growing. They work to provide data to development teams to enable them to prioritize reliability and performance improvements through application changes and improved use of the infrastructure resources.

• They have a strong development background (expected to continuously contribute to codebases) in multiple stacks and have a good grasp of observability and systems operations.

• SREs operate on a long-term horizon. With an aim to prevent S1 incidents by making sure that we have a system that is elastic to meet demand.

• Analyze existing, create, and maintain new SLOs

• Troubleshoot, evaluate and resolve operational challenges contributing to defined SLOs.

• Define, improve, and engage in adapting architectural application bottlenecks as observed. Work with other engineering stakeholders on resolving larger architectural bottlenecks. Work in close collaboration with software development teams to consult on scaling concerns. Contribute to the future roadmap of software development teams and establish strong operational readiness across teams. Work to enable other teams to scale through automation, knowledge-sharing, and self-service activities.

• Scale systems through automation, improving change velocity and reliability.

• Environment Automation

• SRE focuses on provisioning various environments and automating every operational aspect of the application lifecycle. They have a strong operational background, but their strength is in converting regular manual actions into repeatable automated tasks.

• Automating every operational task is a core requirement for this role.

• (For example, package updates, configuration changes across all environments, creating tools for automatic provisioning of user-facing services, etc.)

• Responding to platform emergencies, alerts, and escalations from Customer Support.

• Ensure systems exist to manage software life cycles (e.g. Operating Systems) with a minimum of manual effort.

• Develop a fully automated multi-environment observability stack based on the existing SaaS system, and extend it to predict capacity needs based on usage patterns. Plan for new service roll-outs, expansion, and capacity management of existing services, and optimize their resource consumption.

• Cloud Efficiency Engineering

• SRE focuses on improving our overall utilization of cloud provider resources. This includes improving tooling and adoption of tagging/labeling, analyzing and leveraging the use of discounting tools such as RIs and CUDs, and collaborating across various teams to increase efficienciency.

• Establish clear ongoing cloud efficiency metrics, highlighting both how we should measure success and identifying methods to achieve those improved results.

• Understand and instrument discounting mechanisms in collaboration with our cloud infrastructure providers. Implement tools, practices, and processes to enable other teams to contribute to efficiency in their areas.

• Plan and implement needed changes in our cloud environments to drive better observability of usage and improved efficiency.
  
  

• You have proven experience (10+ years) demonstrating hands-on technical leadership and business impact in combining software engineering skills with systems engineering skills to solve complex automation and reliability challenges

• You have deep technical experience with cloud providers, containerization technologies, automated deployment frameworks, orchestration frameworks, monitoring, logging, alerting, system internals, networking, databases, distributed systems, and service-oriented architecture

• You have the skills to implement load, stress, performance, and reliability testing standards at scale to improve service, platform, and infrastructure resiliency

• You demonstrate clear decision-making and good trade-offs in complex situations comprising multiple opinions, needs, teams, technologies, cloud providers, and architectural settings

• You communicate effectively with stakeholders ranging from executives to junior engineers across the breadth and depth of the engineering organization

• You exemplify high accountability, integrity, and resilience to maintain focus on both big-picture goals and milestones to get there

• You enable the engineering organization to innovate and deliver with greater speed and safety
  
  

• Impact - Work with scale, our infrastructure handles around 5 Billion+ API hits, 2 Billion+ message events, and more than 40 TeraBytes of data

• Compensation - Best in Industry

• Learning - Work with a team of A-players distributed across 15 countries who move fast (we have built one of the widest products on the market in under 3 years)

• Generous Device Policy - You get a Macbook Pro

• Unlimited Leave Policy
• 1 team offsite every year
• Remote first culture

About Company:

Role Overview

• Senior Engineer with a strong background and experience in cloud related technologies and architectures.
• Can design target cloud architectures to transform existing architectures together with the in-house team.
• Can actively hands-on configure and build cloud architectures and guide others.

Key Knowledge

• 3-5+ years of experience in AWS/GCP or Azure technologies
• Is likely certified on one or more of the major cloud platforms
• Strong experience from hands-on work with technologies such as Terraform, K8S, Docker and orchestration of containers.
• Ability to guide and lead internal agile teams on cloud technology
• Background from the financial services industry or similar critical operational experience
•  

Torrent Power is an Indian energy and power company, having interests in power generation, transmission, distribution and manufacturing and supply of power cables.

Security (AM/Executive)
• To design the security infrastructure / policies for the organisation, implement & monitor the same
• To ensure security compliance with respect to recommendations received from government agencies like CEA, NCIIPC
• Design, review, implement & monitor IT security related controls as part of Internal
• Controls, IFC, ERM
• ISMS certification (ISO 27001) for IT systems; this will include preparation and periodic review of policies and SOPs, regular trainings and maintaining records in prescribed formats
• Conducting internal security audit and generating reports by deploying VA tools
• Periodic security/VAPT audits and implementation of the findings
• IT security related new initiatives like - Security Operations Centre (SOC), Security Information and Event Management (SIEM), cloud security, EMM-enterprise mobility management
• Creating IT Security awareness within the organisation

Who You Are

• Creative thinker and strong problem solver with meticulous attention to detail
• Highly organized, creative, motivated, and passionate about achieving results
• Able to balance multiple tasks and projects effectively and quickly adapt to new situations and technologies
• Able to work both independently and as part of a team
• Systematic problem-solver, coupled with a strong sense of ownership and drive

 

What you need

• 3-7 years of experience as a Site Reliability Engineer or a mix of a software engineer and DevOps.
• Strong hands-on knowledge of Linux fundamentals, System administration scripting, performance tuning/scalability, troubleshooting.
• Write great quality code using SOLID principles including unit and integration tests.
• Hands-on development experience in an object-orientated programming language like Python.
• Hands-on experience developing task automations
• Experience using tools to create and manage CI (continuous integration) and CD (continuous delivery) pipelines.
• Familiarity with software development tools: source code management (SCM systems), code review systems, issue tracking tools, build tools, test frameworks, code quality tools.
• Experience implementing open-source observability and alerting tools, like Prometheus, Grafana, Cortex, Thanos, Alertmanager etc
• Have decent knowledge on networking (VPC, VNet, DNS etc) and of the TCP/IP stack, internet routing and load balancing.
• Worked with log and configuration management tool
• Prior experience of working with AWS, Azure, GCP is a plus
• Prior experience of working with Kubernetes, Docker and containers is plus
• Strong interpersonal communication skills (including listening, speaking, and writing) and ability to work well in a diverse, team-focused environment with other SREs, Engineers, Product Managers, etc.
• Documenting your work should be in your DNA

 

What you get

• A chance to develop and build something (probably from scratch) which you can be proud of
• Build and Implement modern systems observability solutions including monitoring, alerting, metrics, logging, and APM & distributed tracing.
• Scale systems sustainably through automation and evolve systems by pushing for changes that improve reliability and velocity.
• Maintain business continuity by identifying and driving opportunities to make systems highly resilient and human-free.
• Closely work with the software engineering team to ensure accurate monitoring and metrics are being built into applications before going to production.
• Develop and maintain software modules for use and re-use in cloud and on-premise systems automation.
• Identify process gaps and implement process improvements to increase operational reliability
• Drive standardization efforts across the services, infrastructure, systems, and practices
• Develop Systems & Tools to help with Development team to uphold the Reliability principles

Responsibilities:

The Senior Information Security Engineer is responsible for the implementation, execution and maintenance of technology solutions to mitigate risk, to protect the IT and Engineering environments by reducing the probability of, and to minimize the effects of, damage caused by malware, malicious activities and security events.

The individual will help protect the company by deploying, tuning, and managing security tools across the computing environment, as well as provide security incident response cycle support. They should have a passion and skills for identifying the latest cyber threats. The individual will:

Basic Qualifications

• Working knowledge of infrastructure-as-code and CI/CD pipelines tools (i.e. Jenkins, Teamcity, CircleCI etc..)
• Lead and participate in major day-to-day operational aspects of the security engineering team including improvement of current security controls while constantly identifying areas of needed improvement
• Deep hands-on security experience with cloud providers, such as AWS, GCP, Azure
• Understanding of automated security testing approaches and tools
• Experience with proactive integration of security into the development process
• Lead continuous improvement efforts of out security tools and systems (Concertation on SIEM, IDS, EDR Tools)
• Work with our customers (Security Operations, Incident Response, and Product teams) to incorporate high quality security alerting into their operational workflows
• Improve overall security practitioner efficiency through process automation
• Foster and promote collaboration among all members of the IT, Infrastructure, and Risk Management Departments.

Minimum Qualifications/Requirements

• BS or MS in Computer Science or related field
• Minimum 7+ years of cybersecurity experience
• Must have previous experience performing threat hunting and incident response duties using SIEM tools, cybersecurity management consoles, and ticketing systems
• Experience in deployment, development, and maintenance of SIEM
• Experience writing and using Ansible server administration scripts, and create simple Python, BASH, or Powershell scripts to automate cybersecurity functions
• Scripting experience to automate security operations, alerting, and compliance checks, CI/CD design, deployment, and management
• Experience with managing endpoint response and detection infrastructure and endpoints at the enterprise level, including performing upgrades to the back end application and deploying new agent versions to endpoints
• Understanding the investigative process and performing triage for cybersecurity incidents
• Experience maintaining industry leading security technologies or infrastructure systems in complex technical IT operations environment
• Must be detail-oriented and organized with ability to handle competing demands while meeting deadlines
• Experience in authentication protocols and frameworks to include OAuth, and AWS IAM
• Proactive and motivated; team player with a positive can-do attitude
• Strong analytical/problem-solving skills and cross-functional knowledge across multiple IT operational and security disciplines
• Ability to communicate technical concepts to a broad range of technical and non-technical staff
• Must possess a high degree of integrity, be trustworthy, and have the ability to lead and inspire change

Responsibilities:

• Provide daily support with resolution of escalated tickets and act as liaison to business and technical leads to ensure issues are resolved in timely manner.
• Incident resolution and supporting production system deployments.
• Suggest fixes to complex issues by doing a thorough analysis of root cause and impact of the defect.

• Support and deliver within Continuous Integration/Continuous Delivery pipelines.

• Prioritise workload, providing timely and accurate resolutions.
• Perform production support activities which involve assignment of issues and issue analysis and resolution within the specified SLAs.
• Understand linux. SSH to linux box, look for web logs etc
• Understand web apps to be able to troubleshoot issues

 

 

Requirements:

• Good to have programming experience with Python.
• Java and JavaScript development experience would be an added advantage.
• You should not be afraid to do some development as well as Devops.
• Clear written and oral communication is a must.

What you’ll do

• Develop and Maintain IAC using Terraform and Ansible
• Draft design documents that translate requirements into code.
• Deal with challenges associated with scale.
• Assume responsibilities from technical design through technical client support.
• Manage expectations with internal stakeholders and context-switch in a fast paced environment.
• Thrive in an environment that uses Elasticsearch extensively.
• Keep abreast of technology and contribute to the engineering strategy.
• Champion best development practices and provide mentorship.

What we’re looking for

• An AWS Certified Engineer with strong skills in
o Terraform
o Ansible
o *nix and shell scripting
• Preferably with experience in:
o Elasticsearch
o Circle CI
o CloudFormation
o Python
o Packer
o Docker
o Prometheus and Grafana
o Challenges of scale
o Production support
• Sharp analytical and problem-solving skills.
• Strong sense of ownership.
• Demonstrable desire to learn and grow.
• Excellent written and oral communication skills.
• Mature collaboration and mentoring abilities.

Job Description Roles and Responsibilities: • Exploit security flaws and vulnerabilities with attack simulations on multiple application platforms like Android, iOS and Web. • Ability to flow from black box to grey box to white box tests. • Ability to effectively work with the engineering teams to provide technical risk. assessment of technologies in networks, applications, code reviews in the release management cycle. • Ability to perform vulnerability assessments and penetration testing, utilizing tools - commercial and open source. • Perform, review and analyze security vulnerability data to identify applicability and false-positives. • Conduct penetration testing in line with Open Web Application Security Project (OWASP) • Write technical reports that include suggested resolution for identified problem areas and perform operational risk assessment. Required Skills and Abilities: • OWASP top 10 • Security Pen Testing methodologies including automated scans and manual methods • Tools including Burp, Nexpose, NMap, Whois etc. is a plus • Good Hands-On with Linux Debian Flavors and security hardening of the same • Understanding of Web Servers and HTTP 1.0/1.1 Protocol • Troubleshooting web servers like Apache, Nginx and other reverse proxy platforms • Basic understanding of NodeJS, Python and JAVA • TCP/IP networking including IP classes, subnets, NAT • SSL Handshake and Certificates - Understanding • DNS, and DHCP, Network troubleshooting • Remote access methods • Backup and disaster recovery methodologies • Network analysis tools • Good Hands-on using Linux Debian Flavors • Experience with security issues in Cloud Technologies (AWS) is a plus • Ability to grasp new technology concepts quickly • Good documentation skills • Ability to work in a team environment and interact with people • Knowledge and understanding of basic information security principles • Should be aware of the latest Major Application Zero-day vulnerabilities • Should be able to understand security alerts and take necessary actions accordingly Education and Experience: • Bachelor’s degree in information technology related field