Work Across
Get started
All jobs
Save

Senior Security Operations Engineer

DiliTrust
Contract type
Ongoing
Work mode
Remote
Experience
Senior · 5+ years

Job description

Security Operations Engineer responsible for protecting DiliTrust's SaaS platform, cloud infrastructure, networks and production environments. The role focuses on security monitoring, incident response, vulnerability management, hardening and automation within the Infrastructure & Security team.

At a glance

Work mode
Remote
Languages
English

What you'll do

  • Monitor the security of networks, cloud infrastructure, systems, applications and endpoints
  • Administer, configure and continuously improve security tools, including CNAPP, SIEM, EDR, bastion, ZTNA, PKI, antivirus and WAF solutions
  • Continuously evolve detection mechanisms and threat-detection scenarios
  • Investigate security alerts and incidents, support incident handling, and contribute to root-cause analysis, remediation and post-incident reviews
  • Implement hardening measures and support vulnerability identification, prioritization, remediation and follow-up through action plans
  • Validate the security aspects of IT architectures and application projects
  • Actively participate in security audits and penetration tests: scoping, support during the exercise, remediation of findings and follow-up
  • Test products and run technical validations on prototype environments before they reach production
  • Automate deployments and security / infrastructure operations using Infrastructure as Code, configuration management and scripting
  • Create and maintain security procedures, incident-response playbooks, operational documentation and technical standards
  • Define and deliver the team's security roadmap together with the Hiring Manager and peers
  • Keep an active watch on threats and security news, and share learnings with the team

What we're looking for

  • At least 5 years of professional experience in Security Operations, Cybersecurity, Infrastructure Security, Cloud Security or a related field (network, systems or cloud engineering with a strong security component)
  • Practical experience with security monitoring, incident response, vulnerability management, system hardening and operational security
  • Passionate about cybersecurity and interested in automation and the DevOps culture
  • Analytical, autonomous, versatile and rigorous, with a strong sense of service and good synthesis skills
  • Communicate clearly with both technical and non-technical stakeholders
  • Enjoy working collaboratively in an international, distributed team and have a good command of English
  • Good knowledge of Linux (Debian-based environments in particular), Docker and Kubernetes
  • Good knowledge of networking: TCP/IP, DNS and TLS; static routing, VLANs, segmentation and NAT; stateful and application-level firewall rule design; reverse proxies and load balancers; VPN and overlay technologies (WireGuard, IPsec); ZTNA principles (identity-aware access, device posture, micro-segmentation); cloud networking (VPC, peering, private endpoints)
  • Ability to manage network and security configurations as code, using Infrastructure as Code and automation tools such as Terraform, Ansible and AWX
  • Good knowledge of PKI and certificate management: CA hierarchies, certificate lifecycle (issuance, renewal, revocation, automation), TLS / mTLS, key and secret management
  • Administration of security tools: CNAPP, SIEM, EDR, bastion, ZTNA and PKI, including interpreting security events and alerts
  • Hands-on experience with WAF (policy and rule tuning)
  • Familiarity with monitoring tools such as Prometheus, Grafana and Datadog
  • Ability to script and automate repetitive operational or security tasks

Nice to have

  • Knowledge of Google Cloud Platform or an equivalent cloud environment
  • An active interest in security news, emerging threats, conferences and meetups

Your team

Infrastructure & Security

A 12-person team spread across France, Canada and Spain, working in an international context (Europe, North America and EMA).

How to get hired

  1. 1Interview with a member of the Talent Acquisition team (30–45 minutes)
  2. 2Technical interview with the SecOps Team Lead and the Team manager, including a practical case study (about 90 minutes)
  3. 3Final interview with the CTO (30 minutes)

Apply

Save

About DiliTrust

Key facts

  • Infrastructure managed in an automated way with more than 350 assets hosted across cloud providers
  • Security & Infrastructure environment includes 700+ assets