Secure Infrastructure Specialist

We are a leading provider of complete IT infrastructure and security management solutions worldwide.

Our technologies allow organizations to efficiently manage and secure IT to drive sustained business success.

We have achieved strong double-digit growth over the past several years and are backed by Insight Venture Partners, a leading global private equity firm investing in high-growth technology and software companies.

This is an exciting opportunity for a skilled DevSecOps engineer to join our team.

You will be responsible for building and maintaining infrastructure-focused security solutions across the enterprise.

You will work closely with other departments, including Information Security and Software Engineering, to improve the security posture of Kaseya.

• Perform regular security testing and analysis to identify vulnerabilities in the software development process.
• Ensure that the infrastructure used by the development team is secure.
• Ensure that the development process adheres to security compliance standards, such as PCI-DSS, HIPAA, and GDPR.
• Automate security processes, such as vulnerability scanning and code analysis, to ensure that security is integrated into the development process from the beginning.
• Provide education and training to the development team to ensure that they are aware of security best practices and can implement them in their work.
• Respond to security incidents, such as data breaches or cyber-attacks, by investigating and remedying the issue.
• Perform risk assessments to identify potential security threats and develop mitigation strategies to reduce the risk of security breaches.
• Collaborate with the development team, operations team, and security team to ensure that security is integrated throughout the deployment process.

• Familiarity with cloud platforms, including AWS, Azure DevOps, OpenStack, and GCP.
• Experience with provisioning and automation using tools like Terraform, CloudFormation, Ansible, Puppet, and OpenStack.
• Familiarity with Continuous Integration/Continuous Deployment (CI/CD) Tools, including AzureDevOps, Jenkins, CircleCI, GitLab, Travis CI.
• Experience with Security tools and concepts used in all processes from SDLC to pipeline deployment.
• Familiarity with Source Code Management (SCM) tools, including AzureDevOps, Bitbucket, GitHub, GitLab.
• Experience with containerization technologies, including Docker, PodMan, OpenShift, and Kubernetes.
• Experience with infrastructure vulnerability scanners, including Nessus, Qualys, or OpenVAS.
• Familiarity with logging, SIEM, and metrics tools, including Splunk, ELK Stack, Prometheus, Grafana, Kubernetes Logging.
• Experience with programming languages, including Bash, Python3, Ruby, Golang, and PHP.
• Familiarity with encryption and key management tools, including AWS KMS, Azure Key Vault, Google Cloud KMS, Hashicorp Vault, Kubernetes Secret Management.
• Experience with Identity and Access Management (IAM), including Okta, AWS IAM, Azure Active Directory, SAML.
• Familiarity with code analysis tools, including Linters, SonarQube, Snyk, Checkmarx, StackRox.

• Five plus years of experience with CI/CD platforms.
• Three plus years of experience securing applications via CI/CD pipelines leveraging static code analysis, unit and integration testing, dependency analysis, etc.
• Three plus years of experience performing threat and security design reviews.
• Three plus years of experience with containers.
• Three plus years of experience as a Software Engineer developing and maintaining an application.
• Five plus years of experience with Linux administration (full stack or DevOps experience counts).

• Strong written and verbal communication skills, with a passion for documentation.
• Ability to work effectively under pressure in a fast-paced environment.
• Professional, courteous, and positive attitude.
• Good troubleshooting instincts and the ability to quickly triage / perform root-cause analysis.
• The desire and capability to see a problem through to completion.
• Agility in an environment that requires rapid iteration and pivoting.
• Great Project management skills with the capability to manage concurrent initiatives.