Senior SecOps Engineer

Tala; United States; Remote; USD 120,000 - 190,000; Full time

Job summary

Tala, the remote-first AI-native credit infrastructure company, is seeking a Sr SecOps Engineer to design, implement and maintain security solutions on AWS at scale. You will drive defense-in-depth strategies, automate vulnerability management, and improve threat detection across our SaaS platform.

Join Tala with offices in Santa Monica (HQ) and global hubs, collaborating with Product, Engineering and IT in a DevSecOps model.

Qualifications

• 5-7 years of experience deploying security infrastructure in AWS using Infrastructure as Code (IaC).
• Hands-on experience with at least one public cloud (AWS or GCP) and advanced knowledge of securing IaaS services like WAFs, security groups, EC2, EKS/GKE, ECR/GCR, S3/Cloud Storage, RDS/Cloud SQL, logging.

Responsibilities

• Design and implement defense-in-depth infrastructure and application security for the SaaS platform on AWS.
• Architect, implement, configure and automate cloud security for hardening, detection, logging and response against vulnerabilities and threats.
• Provide security-focused thought leadership across the organization.
• Collaborate with Product, Engineering and IT in a DevSecOps model on technologies like firewalls, ACLs, WAFs, IAM roles/permissions, vulnerability management, threat/ intrusion detection, Kubernetes container security, pen tests and endpoint security.
• Assist in incident response and triaging activities for security incidents and events.
• Utilize AI in security operations to streamline and optimize incident management and resolution.

Skills

AWS security

IaC (Infrastructure as Code)

Cloud security

Threat detection

Incident response

DevSecOps

Kubernetes security

Job description

About Tala

Tala is the AI-native credit infrastructure that connects global capital to the global majority. We combine proprietary risk intelligence with an expanding network of capital and distribution partners to power credit access at scale. To date, Tala has distributed more than $9 billion in capital to more than 14 million customers across Africa, Latin America, and Asia, building the definitive contextual dataset on thin-file borrowers in emerging markets. Tala is now converting that foundation into shared infrastructure that partners, capital providers, and ecosystems can build on.

The company has been named to the Fortune Impact 20 list, CNBC's World's Top Fintech Companies twice, CNBC Disruptor 50 for five years, and Forbes' Fintech 50 list for ten years running.

Given the global nature of our team, we operate on a remote-first approach with office hubs in Santa Monica, CA (HQ); Nairobi, Kenya; Mexico City, Mexico; Manila, the Philippines; and Bangalore, India.

Most Talazens join us because they connect with our mission. If you are energized by the impact you can make at Tala, we'd love to hear from you!

The Role

We are currently seeking a Sr SecOps Engineer to design, implement and maintain suitable infrastructure and application security solutions on AWS public cloud environments using DevSecOps mindset. You will bring world class cloud-native security expertise to implement solutions for security configuration hardening, vulnerability management, detection, protection and monitoring of security threats and intrusions, in an automated fashion.

What You'll Do

• Driving the design and implementation of defense-in-depth infrastructure and application security solutions for our customer facing SaaS platform in AWS public cloud environments
• Driving architecture, implementation, configuration and automation of native and third party cloud security solutions for hardening, detection, prevention, logging and response solutions for security vulnerabilities and threats
• Provide thought leadership with a security bent of mind to the organization
• Working closely with Product, Engineering and IT in a DevSecOps model on technologies like FWs, ACLs, WAFs, IAM roles and permissions, Vulnerability management and hardening, Threat and Intrusion detection, Kubernetes Container Security solutions, Pen Test and endpoint security
• Assisting in incident response and triaging activities as needed for security incidents and events
• Using AI in security operations to streamline and optimize the security incident management, resolution.

What You'll Need

• 5-7 years of previous experience deploying and administering security infrastructure in AWS public cloud environments, using Infrastructure as Code required
• In-depth hands-on experience with at least one public Cloud platform (AWS or GCP) with advanced knowledge of securing IaaS platforms and services like WAFs, Security Groups, EC2/Compute, EKS/GKE, ECR/GCR, S3/Cloud Storage, RDS/Cloud SQL, Log