It Accel, Inc -
7 emplois
Toronto, ON
Posté hier
Détails de l'emploi :
Temps plein
Expérimenté
Roles and Responsibilities:Key Responsibilities:
Qualifications:
- Security Architecture: Design and implement robust security architectures for Kubernetes clusters and containerized applications.
- Risk Assessment: Conduct comprehensive security assessments and vulnerability scans of Kubernetes environments and associated applications.
- Incident Response: Lead incident response efforts, including identification, containment, eradication, and recovery from security breaches.
- Policy Development: Develop and enforce security policies, best practices, and standards for Kubernetes usage.
- Collaboration: Work closely with DevOps, SRE, and development teams to integrate security into CI/CD pipelines and development workflows.
- Automation: Automate security monitoring, incident response, and compliance checks using tools and scripts.
- Training: Mentor and train team members on Kubernetes security practices and raise awareness of security risks.
- Stay Current: Keep up to date with the latest security threats, vulnerabilities, and mitigation techniques relevant to Kubernetes and cloud technologies.
Qualifications:
- Bachelor's or master's degree in computer science, Information Security, or a related field.
- 5+ years of experience in information security, with a focus on Kubernetes and container security.
- Strong understanding of Kubernetes architecture and security features (RBAC, Network Policies, etc.).
- Experience with cloud platforms (AWS, Azure, GCP) and their security models.
- Familiarity with security tools and frameworks (e.g., Aqua Security, Twistlock, Kube-bench, CIS Benchmarks).
- Proficiency in scripting and automation (Python, Go, Bash).
- Preferred Skills:
- Certifications such as Certified Kubernetes Administrator (CKA) and Certified Kubernetes Security Specialist (CKS).
- Knowledge of compliance frameworks (CIS, NIST, PCI-DSS) applicable to Kubernetes.
- Experience with infrastructure as code tools (Terraform, Helm) and CI/CD tools (Jenkins, GitLab CI).
- Familiarity with monitoring and logging solutions (Prometheus, Grafana, ELK stack).
Partager un emploi :
