Senior Cloud/Infrastructure Security Engineer

Ivalua; Fremont (CA); Hybrid; USD 112,000 - 208,000; Full time

Job summary

An established industry player is seeking a Senior Security Engineer to enhance the security of its cloud-based infrastructure. In this pivotal role, you will implement and monitor technical security controls, conduct vulnerability assessments, and collaborate with various teams to ensure a secure environment. Join a dynamic team dedicated to innovation and excellence, where your expertise will directly impact the security posture of a leading provider in procurement technology. This is an exciting opportunity to leverage your skills in a supportive and collaborative atmosphere, driving forward the mission of sustainable growth and resilience.

Benefits

Medical Insurance

Dental Insurance

Vision Insurance

Transportation Benefits

Weekly Lunches

Snacks in Office

Career Development Program

Social Events

Flexible Working Model

Qualifications

• 5+ years in infrastructure and network security engineering.
• Hands-on experience with Azure cloud security and compliance.

Responsibilities

• Perform security audits on hosting and corporate infrastructure systems.
• Collaborate with SOC to enhance detection and response capabilities.

Skills

Infrastructure Security Engineering

Network Security Engineering

Penetration Testing

Scripting (Python, PowerShell)

Active Directory

Cryptography

Azure Security

Compliance Standards (OWASP, NIST, FedRAMP)

Incident Response

Education

Information Security Qualification (e.g., OSCP, AZ-500)

Tools

Azure

CNAPP

CSPM

MDM

DDoS Protection

Job description

Senior Cloud/Infrastructure Security Engineer

Pay Competitive

Location: Fremont, California

Employment Type: Full-Time

Job Description

• Req#: 6447195

Senior Security Engineer

(Fremont - USA)

Founded in 2000, Ivalua is a leading global provider of cloud-based procurement solutions.

COMPANY OVERVIEW

At Ivalua, we are a global community of exceptional professionals who believe that digital transformation revolutionizes supply chain sustainability and resiliency to unlock the power of supplier collaboration.

We achieve this through our leading cloud-based spend management platform that empowers hundreds of the world's most admired brands to effectively manage all categories of spend and all suppliers to increase profitability, improve ESG (environmental, social, and corporate governance) performance, lower risk, and improve productivity.

THE OPPORTUNITY

CONTEXT:

Our team is dedicated to serving our clients post going-live to secure an exceptional client experience.

With over 10 global team members, the Infosec team needs to work with IT and R&D teams to keep our enterprise-class SaaS service secure from a variety of threats.

ROLE:

This is an exciting opportunity for a Senior Security Engineer role at Ivalua. You will engineer, implement, review, and monitor technical security controls to protect and enhance the security of our hosting and corporate infrastructure, networks, and applications. You will also help with operational security aspects, which will include performing security reviews on infrastructure changes, reviewing firewall rules, analyzing results from vulnerability or penetration testing reports, investigating security events by analyzing logs, and identifying actionable plans to address them in the infrastructure.

WHAT YOU WILL DO WITH US

• Perform technical security design, architecture, change, and/or configuration audits/reviews on our hosting and corporate infrastructure systems including Azure cloud environments, servers, network devices, endpoints, and security technologies deployed (CNAPP, MDM, WAF, DDoS, etc.)
• Act as the main SPOC for the network and cloud vulnerability management activities to perform scanning, internal and third-party penetration testing, and red teaming, as well as analysis and retesting of the reported security findings.
• Collaborate with the SOC team to enhance our detection and response processes and capabilities.
• Support the security initiatives for securing our Azure environments (EntraID Conditional Access, CSPM, Infrastructure as Code, NSG rules review, etc.)
• Provide support to the GRC team on the technical security controls related to compliance initiatives (such as FedRAMP, PCI, NIST 800-53 r5, IRAP, SANS CIS 20) and the technical security questions from customers and prospects.
• Act as the SME on infrastructure and cloud security topics, expand and develop sharing of technical knowledge, and collaborate with multiple internal teams to review and improve the technical architecture and efficiency of IT and security operational processes.

YOUR PROFILE

If you have the below experience and strengths, this role could be for you:

Skills and Experience:

• 5+ years of hands-on experience in infrastructure and network security engineering/architecture, protocols, and technologies like CNAPP, CSPM, MDM, IAM, DDoS.
• 5+ years of hands-on experience in performing network and/or cloud penetration testing.
• Experience with scripting (such as Python, PowerShell, etc.).
• Knowledge of Active Directory (key concepts, protocols, services, tiering, main attacks, best practices for hardening, etc.).
• Knowledge of Cryptography concepts, encryption algorithms, protocols, keys, and certificates management.
• Hands-on experience with security concepts on Azure cloud environments and services (Azure EntraID, Azure Key Vault, Azure encryption, Azure Sentinel, NSG, Azure firewall, etc.).
• Experience with security incident response and investigation.
• Ability to foster collaborative, open, and working relationships with technology and other stakeholders.
• Experience with security standards and compliance programs such as OWASP, NIST, FedRAMP, PCI, SANS CIS 20.
• An Information Security qualification or evidence of starting to work towards e.g., OSCP, eJPT AZ-500, GIAC GPEN or similar certification.
• Ability to handle multiple tasks, prioritize and meet deadlines.

Soft Skills:

• Ability to handle multiple tasks, prioritize and meet deadlines.
• Ability to foster collaborative, open, and working relationships with technology and other stakeholders.

WHAT HAPPENS NEXT

If your application fits this specific position’s needs, our skilled Talent team will reach out to schedule an initial screening call. Get one step closer to achieving your goals – apply today!

Our Talent team will guide you through every step of the interview process - from preparation to completion. They're here to support you!

Our recruitment process is designed to assess your competencies through a series of personalized interviews with internal stakeholders relevant to the role. Interviews will be conducted virtually via video or on-site with face-to-face meetings.

LIFE AT IVALUA

• Hybrid working model (3 days in the office per week).
• We're a team dedicated to pushing the boundaries of product innovation and technology.
• Sustainable Growth, Privately Held.
• A stable and cash-flow positive company for 10 years.
• Snacks and weekly lunches in the office.
• Feel empowered to pursue your goals with improved team collaboration and increased creativity/productivity.
• Unlock and unleash your full professional potential with our exceptional training and career development program.
• Join a dynamic and international team of top-notch professionals who are experts in their respective fields. Collaborate with like-minded individuals who are deeply passionate and highly motivated about their work. Experience a truly diverse and inclusive work environment where your unique contributions are highly valued.
• Regular social events, competitive outings, team running events, and musical activities.

Powered by People - Powered by You!

United by our values, we embrace diversity and equity in the broadest possible sense to create an inclusive workplace. To help our customers make supply chains more efficient, sustainable, and resilient, we rely on a global team with a variety of backgrounds, skills, and views. We believe in equal opportunity and in diversity as a driver of innovation that cultivates a spirit of inclusiveness, creates a productive and fun place to work, and provides fulfilling career opportunities for all Ivaluans.

COMPENSATION

The compensation range for this position reflects the cost of labor across our US locations and is based upon careful and continual market research. In addition to location, compensation may also vary based upon job-related knowledge, skills, and experience.

Title: Senior Security Engineer

Range minimum: USD 112,000

Range maximum: USD 208,000

Additional compensation/rewards: Ivalua also offers exceptional benefits including medical, dental, vision, and transportation.

#LI-PDE

#LI-HYBRID

About the company

Procurement technology to Manage All Spend & All Suppliers with No Compromises across the source-to-pay process in the cloud.