About the role
The Role
As a Security Engineer with Everseen’s Security team, you will work closely with Infrastructure and Security teams, build, automate, and operate across a modern cloud, network, and on-premises stack. You'll take direct ownership of hardening our environments and improving detection coverage within a streamlined, collaborative culture.
What you’ll do
Cloud & Container Security
-
Define and maintain security standards for various workloads (AKS, GKE) — covering RBAC, network policies, and admission controls
-
Maintain and improve security posture across Azure (Entra ID, Sentinel, Defender for Cloud)
-
Contribute to container image scanning and runtime security monitoring
-
Support JFrog Artifactory operations including artifact security and access control
Infrastructure & Endpoint Security
-
Apply and maintain CIS benchmark hardening across all environments company-wide.
-
Manage patching across Linux systems, ensuring timely remediation and compliance.
-
Support vulnerability management lifecycle: triage, prioritization, and remediation tracking
Detection, Monitoring & Response
-
Maintain and improve Microsoft Sentinel log ingestion, analytics rules, and detection coverage.
-
Investigate security alerts, triage incidents, and support SOC activities.
-
Build and maintain correlation rules, workbooks, and SOAR playbooks.
DevSecOps & Automation
-
Implement and maintain SAST, DAST, dependency scanning, and secrets detection in GitLab CI/CD.
-
Automate security operations tasks using Bash and Ansible.
-
Contribute to Infrastructure-as-Code security reviews (Terraform, Helm, Kubernetes manifests).
-
Support shift-left security practices and developer security enablement.
Collaborating With
You will work closely with the Infrastructure and Security teams, operating seamlessly alongside network engineering, DevOps, and development groups. Day-to-day, your collaboration will be highly technical working directly with engineering peers to harden our infrastructure and integrate security tooling into CI/CD pipelines.
Profile and Skills
Must-Have Experience
-
3+ years in a Security Engineer, DevSecOps, or equivalent hands-on role.
-
Solid Linux fundamentals: Comfortable navigating, troubleshooting and administering Linux environments strictly via the command line.
-
Cloud Infrastructure: Practical experience with at least one major cloud platform (Azure or GCP is strongly preferred).
-
Networking fundamentals: Understanding of TCP/IP, DNS, routing, firewall rule logic, and VPN concepts.
-
Automation & IAC: Proficient in Bash for scripting, alongside hands-on experience with configuration management and provisioning tools like Ansible and/or Terraform.
-
Vulnerability Management & Cloud Security: Hands-on experience with traditional and cloud-native security tooling such as Tenable (including Tenable Cloud Security / Ermetic), Wazuh, Qualys, or equivalent platforms.
-
Container Ecosystems: Hands on experience with Docker, Kubernetes, and container image scanning.
-
Software Development Lifecycle: Experience with GitLab CI/CD pipeline security integration (SAST, DAST, secret detection)
Strong Differentiators & Nice-to-Haves
-
Microsoft Sentinel administration (log ingestion, KQL query writing, analytics rules) or other SIEM administration experience.
-
Azure certifications (e.g., AZ-500: Azure Security Engineer).
-
RHEL subscription management, Insights, and patch automation with Ansible.
Working knowledge of security frameworks in a live environment (ISO 27001, NIST, or CIS Benchmarks).
Ways of Working & Soft Skills
-
Ownership mindset: You close the loop and solve problems; you don't just flag issues.
Clear communication: You are comfortable coordinating asynchronously and possess business-fluent English for both written and verbal collaboration.
Tech jobs straight from company career pages. No recruiters, no middlemen, no spam.