Security Engineer

The Role

As aSecurity Engineer with Everseen’s Security team, you will workclosely with Infrastructure and Security teams, build, automate, and operate across a modern cloud, network, and on-premises stack. You'll take direct ownership of hardening our environments and improving detection coverage within a streamlined, collaborative culture.

What you’ll do

Cloud & Container Security

• Define and maintain security standards for various workloads (AKS, GKE) - covering RBAC, network policies, and admission controls

• Maintain and improve security posture across Azure (Entra ID, Sentinel, Defender for Cloud)

• Contribute to container image scanning and runtime security monitoring

• Support JFrog Artifactory operations including artifact security and access control

Infrastructure & Endpoint Security

• Apply and maintain CIS benchmark hardening across all environments company-wide.

• Manage patching across Linux systems, ensuring timely remediation and compliance.

• Support vulnerability management lifecycle: triage, prioritization, and remediation tracking

Detection, Monitoring & Response

• Maintain and improve Microsoft Sentinel log ingestion, analytics rules, and detection coverage.

• Investigate security alerts, triage incidents, and support SOC activities.

• Build and maintain correlation rules, workbooks, and SOAR playbooks.

DevSecOps & Automation

• Implement and maintain SAST, DAST, dependency scanning, and secrets detection in GitLab CI/CD.

• Automate security operations tasks using Bash and Ansible.

• Contribute to Infrastructure-as-Code security reviews (Terraform, Helm, Kubernetes manifests).

• Support shift-left security practices and developer security enablement.

Collaborating With

You will work closely with the Infrastructure and Security teams, operating seamlessly alongside network engineering, DevOps, and development groups. Day-to-day, your collaboration will be highly technical working directly with engineering peers to harden our infrastructure and integrate security tooling into CI/CD pipelines.

Profile and Skills

• 3+ yearsin a Security Engineer, DevSecOps, or equivalent hands-on role.

• Solid Linux fundamentals:Comfortable navigating, troubleshooting and administering Linux environments strictly via the command line.

• Cloud Infrastructure:Practical experience with at least one major cloud platform (Azure or GCP is strongly preferred).

• Networking fundamentals:Understanding of TCP/IP, DNS, routing, firewall rule logic, and VPN concepts.

• Automation & IAC: Proficient in Bash for scripting, alongside hands-on experience with configuration management and provisioning tools like Ansible and/or Terraform.

• Vulnerability Management & Cloud Security: Hands-on experience with traditional and cloud-native security tooling such as Tenable (including Tenable Cloud Security / Ermetic), Wazuh, Qualys, or equivalent platforms.

• Container Ecosystems:Hands on experience with Docker, Kubernetes, and container image scanning.

• Software Development Lifecycle: Experience with GitLab CI/CD pipeline security integration (SAST, DAST, secret detection)

• Microsoft Sentinel administration (log ingestion, KQL query writing, analytics rules) or other SIEM administration experience is preferred

• Azure certifications (e.g., AZ-500: Azure Security Engineer) are extremely useful for this role

• Experience with RHEL subscription management, Insights, and patch automation with Ansible is an advantage

• Having a working knowledge of security frameworks in a live environment (ISO 27001, NIST, or CIS Benchmarks) is an advantage

• Ownership mindset:You close the loop and solve problems; you don't just flag issues.

• Clear communication: You are comfortable coordinating asynchronously and possess business-fluent English for both written and verbal collaboration.