Sr. Security Operations (SecOps) Engineer
Company
Vimeo
Location
Bangalore, India
Type
Full Time
Job Description
As a Sr. Security Operations Engineer at Vimeo, you will engage in a variety of activities, either offensive, defensive, or some combination thereof, ultimately aimed at safeguarding our 300+ million users who entrust Vimeo with their content every day.
Youβll plan, carry out, and lead security initiatives to monitor and protect sensitive data and systems from infiltration and cyber-attacks.
You will likely collaborate frequently with and support developers, as well as members of the infrastructure security team, the compliance team, IT, Product, and other teams throughout the organization.
You love to solve puzzles, and are a great team player.
This role is remote.
What you'll do:
Want more jobs like this?
Get Software Engineering jobs in Bangalore, India delivered to your inbox every week.
Depending on your preferences and the current needs of the team, you may either focus on just some of the following areas, or you may choose to become involved with all of them.
- As a Sr. SecOps Engineer, you will be responsible for ensuring the security of our systems and infrastructure. You will work closely with our development, DevOps teams to identify and remediate vulnerabilities, implement security best practices, and automate security processes. You will also monitor and respond to security incidents and maintain compliance with industry and regulatory standards.
- Conduct security assessments of our systems and infrastructure to identify vulnerabilities and risks, identify risk owners and implement mitigating controls.
- Implement and maintain security controls, including access controls, Zero trust network access (ZTNA), network segmentation, and security monitoring tools.
- Design and operate identity management, lifecycle, governance and SSO. β Implement and operate cloud security hardening and cloud security posture management across Google cloud and AWS.
- Develop and maintain security policies and procedures, and ensure compliance with industry and regulatory standards.
- Collaborate with SRE, AppSec and Information technology around vulnerability management, endpoint hardening, detection and response.
- Participate in incident response activities, including investigating security incidents and responding to security alerts.
- Collaborate with development and DevOps teams to implement security best practices throughout the software development and infrastructure lifecycle.
- Automate security processes using scripting and other automation tools. β Stay up-to-date with the latest security threats, vulnerabilities, and technologies. β Collaboration with the compliance and privacy team β help ensure that our company complies with industry best practices and standards
- Process improvements β help strengthen our own internal processes and procedures
Skills and knowledge you should possess:
- 4+ years of experience in a security or operations role, preferably in a cloud-based Linux environment.
- 2+ years experience with container and container orchestration systems β Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent work experience.
- Strong knowledge of security best practices and industry standards, such as NIST, CIS, and ISO.
- Relevant certifications such as CISSP, CCSP, or AWS Certified Security Specialty are a plus.
- Experience with security tools such as IDS/IPS, SIEM, vulnerability scanners, and endpoint protection.
- Experience with automation tools such as Terraform, Ansible, or Chef. β Strong scripting skills using Python, shell, or other scripting languages. β Excellent problem-solving skills and the ability to work well under pressure. β Good communication and interpersonal skills.Confident working in and across cloud
environments like AWS and GCP. Detailed knowledge of at least one cloud environment. β Confident with common SDLC components, like git, Jira, Jenkins, etc β At least an upper-intermediate level of English
Bonus points (nice skills to have, but not needed):
- Experience implementing zero trust network access such as Z-Scaler, Warp, Google beyondCorp etc.
- Experience implementing identity lifecycle including provisioning, quarterly access reviews, role management and deprovisioning.
- Understanding of FIDO2 and machine certificate authentication flows. β Experience with Crowdstrike and OKTA.
- Experience with system security hardening guidelines and SDLC principles β Experience with implementing Fedramp and/or HIPAA.#LI-MM1
About Us:
Vimeo (NASDAQ:VMEO) is the worldβs most innovative video experience platform. We enable anyone to create high-quality video experiences to connect better and bring ideas to life. We proudly serve our growing community of nearly 300 million users β from creative storytellers to globally distributed teams at the worldβs largest companies. Learn more atwww.vimeo.com.
Vimeo is headquartered in New York City with offices around the world. At Vimeo, we believe our impact is greatest when our workforce of passionate, dedicated people, represents our diverse and global community. Weβre proud to be an equal opportunity employer where diversity, equity, and inclusion is championed in how we build our products, develop our leaders, and strengthen our culture.
Date Posted
10/14/2024
Views
0
Similar Jobs
Senior Solution Consultant - Coursera
Views in the last 30 days - 0
This role involves supporting various Coursera Business teams through Salesforce Solution Architecture and administration skills Key responsibilities ...
View DetailsManager - ML Practice - Databricks
Views in the last 30 days - 0
Databricks is seeking a worldclass Manager to lead its Machine Learning Practice in India The role involves managing hiring and team growth developing...
View DetailsEnglish Physics content creator - Khan Academy
Views in the last 30 days - 0
Khan Academy is a nonprofit organization offering free worldclass education to millions of students globally They aim to provide locally relevant cont...
View DetailsSoftware Engineer (P3) - Twilio
Views in the last 30 days - 0
Twilio is seeking a Software Engineer with 5 years of experience in designing building and deploying largescale distributed systems and microservices ...
View DetailsSenior Associate - Finance - JustAnswer
Views in the last 30 days - 0
JustAnswer a San Franciscobased company founded in 2003 is seeking a detailoriented and problemsolving Senior Associate Finance for its India Office T...
View DetailsSession Lead - Integrated Application Security Services Nanodegree Session lead - Udacity
Views in the last 30 days - 0
The text describes a position for Session Leads who are industry professionals providing technical support to learners in their Nanodegree journey The...
View Details