Security Engineer: Cloud & AI Infra, DevSecOps

Carbon3.ai; United Kingdom; Presencial; GBP 75.000 - 110.000; Jornada completa

Descripción de la vacante

Era4 seeks a Security Engineer to design, implement, and continuously improve security controls across its AI infrastructure and datacentre operations. You will protect Kubernetes-based and cloud-native environments, secure networking, and enable secure software delivery practices.

You will work with engineering and platform teams to integrate security into CI/CD pipelines, perform threat modelling, and lead vulnerability management across on-prem and cloud workloads.

Formación

• Experience in Security Engineering, Cloud Security, DevSecOps, Infrastructure Security, or Datacentre Security.
• Hands-on experience with vulnerability management platforms and security assessment methodologies.
• Familiarity with CI/CD security controls, secure software development practices, and supply chain security.
• In-depth scripting and automation skills using Python, Bash, or similar languages.

Responsabilidades

• Design, implement, and maintain security controls for on prem Kubernetes and cloud-native environments.
• Review infrastructure architectures and perform security assessments to identify risks and mitigations.
• Integrate security controls into CI/CD pipelines, including SAST, DAST, dependency scanning, container image scanning, and secrets detection.
• Partner with development teams to implement secure coding practices and remediate findings; conduct threat modelling and security reviews.
• Lead vulnerability identification, prioritisation, remediation, and reporting across infrastructure and applications.
• Develop and maintain security monitoring, alerting, detection capabilities and incident response playbooks; perform root cause analysis and coordinate remediation.
• Build automation to improve security monitoring, compliance validation, vulnerability management, and incident response using IaC and policy-as-code frameworks.

Conocimientos

Security Engineering

Cloud Security

DevSecOps

Infrastructure Security

Python scripting

Threat modelling

Vulnerability management

Herramientas

SAST tooling

DAST tooling

Container image scanning

Secrets detection

Descripción del empleo

Era4 seeks a Security Engineer to design, implement, and continuously improve security controls across its AI infrastructure and datacentre operations. You will protect Kubernetes-based and cloud-native environments, secure networking, and enable secure software delivery practices.

You will work with engineering and platform teams to integrate security into CI/CD pipelines, perform threat modelling, and lead vulnerability management across on-prem and cloud workloads.