Cloud Security Engineer

Bose - Framingham, MA

Full-time - Mid Level

Framingham, MA

Furniture, Home Furnishings, Electronics, and Appliance Retailers

About the position

As a Cloud Security Engineer at Bose, you will play a crucial role in enhancing the security and stability of our mature cloud platform, which powers critical experiences for millions of Bose products. This position involves embedding security practices into the development pipeline and improving the overall cloud security program to meet enterprise-level objectives.

Responsibilities

• Ensuring the security of the cloud infrastructure and services
• Improving vulnerability discovery and the patching process
• Writing microservices and scripts as needed to build security into our platform
• Streamlining secrets and credential management
• Implementing and managing the security tools and platforms
• Evaluating and deploying open-source tools for monitoring and security operations
• Aiding in anomaly detection, attack identification, mitigation, and forensics during security incidents
• Understanding the engineering aspect of developers' projects to expedite secure development
• Evangelizing security principles, tooling and best practices
• Staying up-to-date on security news, relevant technologies, and trends

Requirements

• Deep understanding of cloud infrastructure security and software development principles
• Extensive experience developing and maintaining cloud microservices in Java, Python, Go, Ruby
• Experience with public cloud providers (AWS), containerization (Docker), and container orchestration (Kubernetes)
• Experience with security tools, methodologies, and a strong eye for security best practices
• Passion for security developer productivity and experience automating developer pain points
• Experience implementing security tools automation through CI/CD pipelines, configuration management tools, using Jenkins, Groovy, and microservices
• Strong background in Linux/Unix administration and scripting
• Experience with Kubernetes admission control tools such as OPA and Kyverno
• Experience writing Kubernetes Operators is desired
• Outstanding communication skills; demonstrated ability to explain complex technical issues to both technical and non-technical audiences
• Understanding of Agile and other development processes and methodologies
• 5 or more years working in cloud security, software development, or network management
• Bachelor's degree in computer science, or equivalent

Nice-to-haves

• Experience writing Kubernetes Operators is desired

Benefits

• Competitive salary
• Benefits package
• 401k match
• Pension
• Easy commute right off Mass Pike
• Culture of excellence, respect, opportunity, and passion for innovation