Accountabilities:

Support incident management and resolution activities, helping coordinate responses, investigate security incidents, and implement effective remediation measures.
Lead the continuous improvement of incident management procedures, ensuring that established processes are documented, followed consistently, and regularly reviewed.
Strengthen the Secure Software Development Lifecycle (SSDLC) by implementing security improvements across software development processes, vulnerability detection, and remediation workflows.
Oversee vulnerability scanning and remediation activities, ensuring identified security issues are prioritized and addressed within established timelines.
Develop security documentation, educational resources, and awareness materials to help engineering teams adopt secure development practices.
Streamline the handling of customer security questionnaires by developing tools, automations, and systems that improve response efficiency and accuracy.
Assess potential business continuity risks and develop comprehensive disaster recovery and business continuity plans.
Coordinate recurring disaster recovery exercises and validate the effectiveness of established recovery procedures.
Collaborate with cross-functional engineering teams to provide infrastructure support for new features, services, and platform capabilities.
Improve and automate infrastructure management and deployment workflows using tools such as Terraform, Argo, and GitHub Actions.
Manage, maintain, and optimize Google Cloud Platform (GCP) infrastructure and Kubernetes (GKE) environments, ensuring scalability, availability, performance, and reliability.
Enhance the organization's observability capabilities by maintaining and improving monitoring systems using Sentry, Prometheus, Grafana, and Alertmanager.
Implement and maintain performance monitoring solutions, including k6 and similar tools, to identify bottlenecks, monitor system health, and support capacity planning.
Establish proactive monitoring and alerting mechanisms to detect operational issues early and minimize service disruptions.
Collaborate with backend engineering teams to support reliable microservices architectures, asynchronous processing, and event-driven infrastructure.
Contribute to compliance and security initiatives, supporting the implementation and maintenance of industry-recognized standards and certifications.
Identify opportunities to improve internal engineering efficiency, infrastructure reliability, security maturity, and operational processes.

Requirements

At least 5 years of hands-on experience managing cloud infrastructure, infrastructure automation, and production environments.
Demonstrated experience supporting or achieving security and compliance certifications such as SOC 2 Type II, ISO 27001, or equivalent frameworks.
At least 3 years of practical experience working with cloud providers, preferably Google Cloud Platform (GCP).
At least 3 years of experience deploying, managing, and maintaining Kubernetes clusters in production environments.
Strong understanding of cloud-native infrastructure, containerization, infrastructure-as-code principles, and automated deployment practices.
Practical experience with infrastructure automation and orchestration tools such as Terraform, Argo, and GitHub Actions.
Experience with Node.js or Python for backend services, particularly within microservices-based architectures.
Familiarity with asynchronous processing, message queues, and event-driven architectures, including technologies such as Kafka and Google Pub/Sub.
Knowledge of security engineering principles, including vulnerability management, secure software development practices, incident response, and remediation processes.
Understanding of business continuity planning, disaster recovery strategies, operational resilience, and security risk management.
Experience implementing observability and monitoring solutions using tools such as Sentry, Prometheus, Grafana, and Alertmanager.
Familiarity with performance testing and monitoring tools, including k6 or equivalent solutions.

How Jobgether works

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1