Lead, Security Compliance Engineer

You are a great fit for this role if you have

• A strong desire to address complex security challenges across Big Data platforms, with a proven track record of driving solutions independently.
• Solid understanding of cloud and on-premise security technologies, including securing workloads on AWS, Azure, GCP, and hybrid environments.
• Hands-on experience with security tools and integrating automated vulnerability assessments into CI/CD pipelines.
• Proficiency in programming and scripting languages like Python, Java, or Bash, and familiarity with securing containerized workloads (Docker, Kubernetes).
• Excellent communication skills, with the ability to articulate complex vulnerabilities, mitigation strategies, and solutions to diverse stakeholders.
• Excellent communication skills, with an ability to clearly and concisely explain tricky issues and complex solutions
• Ability to quickly learn new technologies
• Ability and willingness to travel up to 50% of the time to meet with customers

What we look for:

• 8-10 years of expertise in identifying, and fixing vulnerabilities in open-source projects and contributing security patches to upstream communities.
• Strong programming skills in Python, Java, and Bash, with expertise in containerization tools (Docker, Kubernetes) and security practices.
• Proficiency in security tools like MendScan, Aqua Scanner, Trivy, and Twistlock, with the ability to automate vulnerability assessments and integrate security checks into CI/CD pipelines.
• Strong understanding of open-source technologies with hands-on experience in Big Data platforms like Hadoop, Spark, Hive, Kafka, and related tools, along with familiarity with their architecture and associated security challenges.
• In-depth knowledge of securing deployments across cloud platforms (AWS, Azure, GCP) and on-premises environments, with familiarity in hybrid infrastructure and its security requirements.
• Strong awareness of emerging threats, vulnerabilities, and attack vectors in open-source software, with expertise in implementing preventive measures and mitigating risks effectively.
• Good to have: Experience with compliance frameworks like SOC2, GDPR, HIPAA, PCI DSS, ISO 27001, and NIST, with the ability to implement and automate compliance controls and manage related documentation.
• Experience collaborating with open-source communities, contributing patches, and engaging in security-related discussions to improve project security.
• Strong problem-solving mindset with the ability to propose effective workarounds and long-term solutions for mitigating vulnerabilities.