Cloud Security Engineer

About the position

As a Cloud Security Engineer, you will play a crucial role in designing, implementing, and maintaining security measures to protect our cloud-based infrastructure across multiple platforms including AWS, GCP, and Azure. You will work closely with our engineering and operations teams to ensure the integrity, confidentiality, and availability of our systems and data. The ideal candidate will have expertise in cloud security best practices, container security, automation tools such as Terraform, and programming languages like Golang and Python. The Security Operations team at Opendoor focuses on identifying and protecting assets, detecting anomalies and attacks, responding to compromise, and recovering from asset compromise in order to return the business to a steady state. The scope of the Security Operations team includes Application Security, Detection Operations, Incident Response, Infrastructure Security, Penetration Testing, and Threat Intelligence.

Responsibilities

• Design and deploy security controls to monitor and protect cloud resources.
• Provide a paved path to Engineering teams to adopt security best practices in the cloud, container orchestration, container, and CI/CD domains.
• Conduct regular security assessments and audits of cloud infrastructure and applications.
• Collaborate with development and operations teams to integrate security into the software development lifecycle (SDLC).
• Implement container security measures and ensure secure deployment and orchestration using Kubernetes.
• Automate security processes using Terraform and other infrastructure-as-code (IaC) tools.
• Respond to security incidents and perform root cause analysis to prevent future occurrences.
• Stay current with emerging threats, vulnerabilities, and security technologies in the cloud space.
• Provide guidance and support to team members on security best practices and procedures.

Requirements

• Experience with infrastructure-as-code tools such as Terraform.
• Strong understanding of containerization technologies and container security.
• Bachelor's degree in Computer Science, Information Security, or related field.
• 5+ years of experience as a Cloud Security Engineer or similar role.
• Proficiency in cloud platforms such as AWS, GCP, and Azure.
• Hands-on experience with Kubernetes for container orchestration.
• Proficiency in programming/scripting languages like Golang and Python.
• Knowledge of security frameworks like CIS and NIST.
• Excellent communication and collaboration skills.

Nice-to-haves

• An understanding of the value of usability and buy-in when it comes to security policy and practices.
• CI/CD Security expert: You have deep experience in all aspects of CI/CD security.
• A love of instrumentation.
• Passion for automation.
• Love for security at work and outside of work, as shown by: presenting at a known security conference, contributing to or creating open source security tools, contributing to the security community in general.

Benefits

• Paid time off
• 12 paid holidays per year
• Medical/dental/vision insurance
• Basic life insurance
• 401(k) to eligible employees