Вакансія Senior Security Engineer

Skills

• CDN
• WAF
• Akamai
• CloudFlare
• AWS
• API
• Python
• CI/CD
• GitLab CI

Опис вакансії

Pwrteams are seeking a Senior Security Engineer to join the Security Platform team, which owns and maintains a unified and overarching CDN & WAF capability at TUI for our digital services. You will be working alongside the Security Practice team which provides solutions, consultancy, education and guidance across the Product & Engagement area. The team’s focus is to drive forward maturity in developing secure software components and products.
The Senior Security Engineer is a practitioner and an advocate of state-of-the-art secure coding, secure design and security automation practices with a broad toolkit of technologies and methods and with a strong DevSecOps mindset, being able to tackle the whole software development cycle of designing, building, testing and deploying applications. Working in an agile environment and keeping up with the ever-evolving technical landscape the Senior Security Engineer is a lifelong learner and likes to think outside the box.

Responsibilities:

• You will use your deep technical skills to create software products that are secure by default and work collaboratively with software engineers, cloud engineers and architects to ensure information security is considered throughout the design and implementation of software products and services.
• You stay up to date with TUI group practices and foster a “security first” mindset. You work alongside engineering teams to understand the threat landscape, business requirements and to describe security risks and goals.
• You provide your team with tooling and automation to identify possible threats and vulnerabilities before they are promoted to production, thereby helping them to protect our customers’ data.
• You tackle the whole cycle of designing, building, testing and deploying software artefacts.
• You take an engineering approach to solving security problems, selecting and guiding teams to use the right tools for the right jobs and thus solve the given business and technical problems in an efficient way.
• You show a commercial mentality, focusing on solving business problems in the best way.
• You are able to verbalise your thoughts and ideas and take the initiative to translate ideas into outcomes.
• You will research, evaluate and test new approaches, processes and tools and help teams to use them effectively.
• You are well-connected across the domain, within the broader TUI community and relevant Communities of Practice.
• You are responsible for the operation and constant security optimisation and adoption of TUI’s Web Application Firewall infrastructure. Furthermore, you work with global teams in the organisation to enhance their security posture.
• You love to learn and acquire new skills and keep up to date with latest developments in your focus areas.

Qualifications:

• Proficient experience in working with CDN and WAF solutions like Akamai or Cloudflare.
• Advanced experience in designing secure, highly available, distributed applications in an Amazon Web Services (AWS) environment.
• Ability to understand and analyse complex security events as well as adjust the resulting ongoing security profiles.
• Experience in defining, planning, implementing, maintaining, and upgrading security measures, guardrails and controls for WAF and CDN.
• Familiar with information security standards & practices and their practical implications.
• Experienced in securing APIs.
• Deep automation skills, hands-on with some programming languages such as Python.
• Advanced experience with CI/CD, preferably Gitlab CI.
• Being customer centric, passionate about delivering great digital products and services.
• Passionate about continuous improvement, collaboration and great teams.
• Strong problem-solving skills coupled with good communication skills.
• Understanding of social and ethical implications of software engineering.
• Open minded, inquisitive, life-long learner.
• Comfortable with ambiguity, highly autonomous.