Security Engineer - Vulnerability Management

Job Description

Summary:

We're in search of a Security Engineer

Here are some of the specific details:

Job Title : Security Engineer

Location : Mountain View, CA (4 days onsite 1 day WFH)

Duration : 12 months with a possibility of extension

Status : HybridPrimary Focus :70% Security Engineer, 30% DevOps knowledgeCollaborate with the DevOps and engineering teams to maintain security during software deployments.Responsibilities :Deploy and manage security tools that monitor and assess infrastructure health.Write basic scripting to deploy security artifacts into the system (DevSecOps practices).Utilize tools for vulnerability management and container workload protection, particularly in

Kubernetes .Harden and secure Kubernetes deployments with enterprise-grade security tools.Manage security across platforms, focusing on

Application Security ,

Container Security ,

Platform Security , and

Infrastructure Security .Automate deployment processes using

Terraform

and Python.Technology Requirements :

Cloud Platforms : Focused on

AWS

(experience with

GCP

and

Azure

is not necessary).Security Tools :Candidate will work on this tool -

Cloud Workload Protection Platforms (CWPP) .Automation : Experience with

CI/CD pipelines ,

DevOps tools

(e.g., Jenkins), and scripting languages for deployment (Terraform, Python).Skills & Experience :

Top 3 to 5 Skills :DevOps automation with

Python

and

Terraform .Strong experience in

Security Vulnerability Management

(operating, developing, and engaging with vulnerability management tools).Basic understanding of DevSecOps principles.Experience managing container workload security in Kubernetes.Knowledge of

CVEs (Critical Vulnerabilities and Exposures)

and how to prioritize and resolve them.Certifications : Preferred certifications like

CISSP ,

CSSP , or relevant security certifications.Education :Bachelor`s Degree + 10+ years in security, with at least 2-3 recent years focused on security or vulnerability management is highly preferredOR an Associate degree with Certification in security like CISSP CSSP with 10 years of security engineer experience that too in most recent jobsOR just 10+ years of strong experience as a Security Engineer with vulnerability security management and automation using python and terraformImportant Notes :

This role is not for

Penetration Testers ,

Audit & Compliance Analysts , or purely

DevOps Engineers .The ideal candidate will

not

focus solely on governance or auditing security but on hands-on

vulnerability management

and

DevSecOps .Work Setup : 4 days onsite in Mountain View, 1 day remote.Team Structure : The Security Engineer will report to Anshul Arora and work closely with the DevOps, Engineering, and Product teams.

Interviews : 3 rounds, which may include coding questions such as writing deployment code using Terraform

Let me know if you are interested in this job and/or if you can assist us by referring someone who is interested in this job, since we offer the lucrative referral bonuses.

A reasonable, good faith estimate of the minimum and maximum for this position is $80.00 to $ 90.00

Benefits will also be available and details are available at the following link:

2024 - 2025 Contractor Benefits Guide:

2024 Benefits Guide (Contract Employees)

2023-2024 Summary of Benefits:

https://flipbooks.nashsquared.com/2023-summary-of-benefits-contract-employees/full-view.html

2023-2024 Annual Notice:

https://flipbooks.nashsquared.com/2023-harvey-nash-annual-notices/full-view.html

I am looking forward to speaking with you today.

About us:

Harvey Nash is a national, full-service talent management firm specializing in technology positions. Our company was founded with a mission to serve as the talent partner of choice for the information technology industry.

Our company vision has led us to incredible growth and success in a relatively short period of time and continues to guide us today. We are committed to operating with the highest possible standards of honesty, integrity, and a passionate commitment to our clients, consultants, and employees.

We are part of Nash Squared Group, a global professional services organization with over forty offices worldwide.

For more information, please visit us at https://www.harveynashusa.com/

Mohammed

551-270-5210

Sr Recruiter

mohammed.raheemuddin@harveynash.com