security engineer in edtech

HireHi; Amsterdam; On-site; EUR 120,000 - 160,000; Full time

Benefits offered by this job

Relocation support

Lessons allowance

Learning budget

Time off for self-development

Equity and leave allowance

Job summary

Preply ищет инжектора по безопасности платформ, ответственного за защиту инфраструктуры в облаке и Kubernetes. Вы будете разворачивать современные процессы обнаружения, реагирования на инциденты и автоматизацию безопасности.

Важны практические навыки в организации защиты и тесное взаимодействие с командами SRE, Data и Engineering. Кандидат должен обладать опытом END-TO-END реализации проектов безопасности, знанием IAM и мониторинга.

Qualifications

• Опыт обеспечения безопасности облачных и платформенных сред (AWS, Kubernetes).
• Умение разворачивать практики безопасности в продакшн.
• Опыт в CI/CD и инфраструктуре как кода.

Responsibilities

• Владение платформенной безопасностью на AWS, Kubernetes, GCP; обнаружение, оповещения, готовность к инцидентам.
• Руководство инициативами безопасности и их внедрение от идеи до релиза.
• Определение дизайна, реализации и эксплуатации платформенной безопасности.

Skills

AWS

Kubernetes

GCP

CI/CD

Okta

Datadog

Security automation

Incident response

Tools

Terraform

Jenkins

Cloudflare

Job description

Описание

Preply creates personalized language-learning experiences by connecting learners with tutors worldwide. The company combines human-led teaching with technology and AI to support learners across more than 180 countries.

Задачи

• Own platform security across AWS, Kubernetes, and GCP, focusing on detection, alerting, and incident response readiness.
• Lead platform security initiatives end-to-end, from problem definition through rollout and iteration.
• Define how platform security is designed, implemented, and operated.
• Evolve monitoring into an effective and actionable detection and response capability.
• Work hands-on with Datadog, Okta, and SaaS platforms.
• Drive cross-functional security initiatives with SRE, Data, Engineering, and GRC.
• Strengthen cloud and platform security through guardrails, secure patterns, and automation.
• Improve access security for internal infrastructure, including identity, privileged access, and auditability.
• Improve Kubernetes deployment security, including cluster and workload security, policy enforcement, and workload identity.
• Mature detection and response capabilities using Datadog.
• Improve log coverage and data quality across cloud, Kubernetes, CI/CD, identity, and SaaS.
• Build and tune actionable detections with clear severity, ownership, and expected frequency.
• Reduce alert noise through correlation, deduplication, enrichment, and continuous tuning.
• Establish triage workflows and escalation paths while participating in Security on-call rotations.
• Create investigation playbooks and runbooks.
• Partner with Data teams to improve monitoring for suspicious activity and sensitive access patterns.
• Improve secrets management and reduce exposure risk across CI/CD and runtime.
• Build security automation that makes secure practices easier for engineers.

Требования

• Strong experience securing cloud and platform environments, especially AWS and Kubernetes.
• Ability to extend cloud security practices into GCP.
• Hands-on experience delivering technical security initiatives end-to-end in production.
• Strong understanding of the software development lifecycle.
• Experience with CI/CD and infrastructure as code.
• Practical experience improving identity and access security.
• Strong familiarity with Okta event monitoring and identity-focused detection patterns.
• Experience building or maturing security operations capabilities, including triage, runbooks, tuning, and measurable improvement.
• Experience improving logging coverage and signal quality.
• Experience building actionable detections.
• Strong collaboration and influence skills across SRE, Data, Engineering, and GRC.
• Business-oriented mindset and comfort making cost-benefit tradeoffs.
• Strong communication skills.
• Minimum C1 English level.
• Willingness to participate in on-call rotations and partner with SRE during incidents.
• Nice to have: Terraform and infrastructure as code at scale, Jenkins hardening and CI/CD supply chain security controls, Cloudflare security controls, scripting or programming for automation and tooling, incident response in cloud-native environments.

Условия

• Paid relocation to London or Barcelona.
• A generous monthly allowance for lessons on Preply.com.
• Learning & Development budget.
• Time off for self-development.
• Competitive financial package with equity and leave allowance.
• The opportunity to support learners and tutors through language learning and teaching in 175 countries.