{"id":497066,"url":"https://alion.io/job/infracloud-sre-security-engineer","title":"SRE - Security Engineer","company":{"id":355956,"name":"InfraCloud","domain":"infracloud.dev","url":"https://alion.io/company/infracloud","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_payroll_markers","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ArgoCD","optional":false},{"name":"CI/CD","optional":false},{"name":"Falco","optional":false},{"name":"GitOps","optional":false},{"name":"Helm","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"SIEM","optional":false},{"name":"Trivy","optional":false},{"name":"Wazuh","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"ISO 27001","optional":true},{"name":"Kyverno","optional":true},{"name":"PCI DSS","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-09-03T20:32:31Z","employer_posted_date":null,"last_verified_at":"2026-09-03T20:32:31Z","board_verified":false,"closed_at":null,"days_open":54,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":54},"description":"About the Role\nWe are seeking a Security Engineer to design, implement, and maintain security controls across our cloud-native infrastructure and Kubernetes platforms. The ideal candidate will have strong expertise in Kubernetes security, GitOps practices, container security, threat detection, vulnerability management, and application security. You will work closely with Platform Engineering, SRE, DevOps, and Development teams to ensure security is embedded throughout the software delivery lifecycle.\nKey Responsibilities\nKubernetes & Platform Security\nDesign, implement, and maintain security controls for Kubernetes clusters and containerized workloads.\nEstablish and enforce Kubernetes security best practices, including RBAC, Network Policies, Pod Security Standards, admission controllers, and secrets management.\nSecure container images, registries, and deployment pipelines.\nPerform security assessments and hardening of Kubernetes environments.\nGitOps & CI/CD Security\nImplement and maintain secure GitOps workflows using Helm and ArgoCD.\nIntegrate security controls into CI/CD pipelines, including automated security scanning and policy enforcement.\nReview deployment processes to ensure compliance with security standards.\nCollaborate with engineering teams to embed DevSecOps practices across the software development lifecycle.\nThreat Detection & Incident Response\nDeploy, manage, and optimize security monitoring and threat detection solutions.\nConfigure and maintain runtime security monitoring using Falco.\nInvestigate security alerts, incidents, and suspicious activities within cloud-native environments.\nDevelop and maintain incident response procedures and playbooks.\nVulnerability Management\nManage container and infrastructure vulnerability scanning using Trivy.\nAnalyze security findings, prioritize remediation efforts, and coordinate fixes with engineering teams.\nTrack vulnerability metrics and ensure timely remediation of critical risks.\nSecurity Monitoring & SIEM\nDeploy, configure, and maintain Wazuh for security monitoring, log analysis, and compliance reporting.\nCreate detection rules, dashboards, and alerts to improve security visibility.\nCorrelate events from multiple sources to identify potential threats.\nApplication & Web Security\nImplement and maintain Web Application Firewall (WAF) solutions.\nConduct application security assessments aligned with OWASP Top 10 recommendations.\nWork with development teams to identify and remediate application security vulnerabilities.\nEstablish secure coding and deployment practices.\nGovernance, Risk & Compliance\nDevelop security standards, policies, and operational procedures.\nSupport security audits, compliance initiatives, and risk assessments.\nMaintain documentation for security architecture, controls, and operational processes.\nRequired Qualifications\nTechnical Skills\nStrong hands-on experience with Kubernetes (K8s) administration and security.\nExperience with Helm and ArgoCD in production environments.\nExperience implementing GitOps and securing CI/CD pipelines.\nExpertise in Falco for runtime threat detection and monitoring.\nExperience with Trivy for vulnerability scanning and container security.\nHands-on experience with Wazuh SIEM/XDR platform.\nStrong understanding of Web Application Firewalls (WAF) and OWASP Top 10 security risks.\nKnowledge of container security, image hardening, and Kubernetes workload protection.\nExperience with Linux system administration and security hardening.\nFamiliarity with Infrastructure as Code and automation practices.\nSecurity Knowledge\nContainer and Kubernetes security.\nCloud-native security architecture.\nVulnerability management and remediation processes.\nSecurity monitoring, incident response, and threat hunting.\nIdentity and access management principles.\nSecure software development lifecycle (SSDLC).\nPreferred Qualifications\nExperience working alongside SRE, Platform Engineering, or DevOps teams.\nSecurity certifications such as:\nCKS (Certified Kubernetes Security Specialist)\nCKA (Certified Kubernetes Administrator)\nCISSP\nGSEC\nSecurity+\nExperience with cloud platforms (GCP, AWS, or Azure).\nExperience implementing security policies using OPA/Gatekeeper or Kyverno.\nKnowledge of SOC operations and compliance frameworks (ISO 27001, SOC2, PCI-DSS, NIST).\nOriginally posted on Himalayas","description_format":"text","description_chars":4336,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-09-07T06:22:47Z"}],"visa":[],"liveness":{"score":7,"band":"cold","label":"Long shot","p_open":0.4,"p_active":0.507,"p_room":0.35,"age_days":54,"expected_fill_days":27,"reasons":["seen:54","win:tail"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/infracloud-sre-security-engineer","json_url":"https://alion.io/job/infracloud-sre-security-engineer.json","meta":{"generated_at":"2026-10-28T08:54:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11555,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":355956},"rest":"https://alion.io/mcp/rest/get_company?id=355956"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finfracloud-sre-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finfracloud-sre-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finfracloud-sre-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/infracloud-sre-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finfracloud-sre-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":497066}},{"tool":"search_jobs","arguments":{"company":"infracloud.dev","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":497066},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}