Security Engineer II
Security Engineer II
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Not Disclosed
Salary Not Disclosed
1 Vacancy
Job Description
Our Opportunity:
Chewy is seeking a DevSecOps Engineer II to join our established technology team in Plantation FL or Boston MA. Our mission is to be the most trusted and convenient destination for pet parents and partners and our Information Security team plays a critical role in supporting that vision by protecting the confidentiality integrity and availability of our this role you will help secure Chewys public cloud environments by developing and integrating security tools writing scripts and automation to support cloud security objectives and implementing scalable solutions that align with our security standards. The ideal candidate will contribute to key security initiatives while embracing Chewys culture of innovation (#ThinkBig) and simplicity (#KeepItSimple).
What Youll Do:
- Manage application and infrastructure as code scanning toolset and integrations with CI/CD pipelines.
- Provide security guidance and risk management through design and code reviews of services running on our public clouds.
- Collaborate with Site Reliability Engineering Vulnerability Management and Security Operations teams to achieve shared security goals.
- Ensure applications and infrastructure deployed to public clouds meet performance privacy and security requirements.
What Youll Need:
- Bachelors degree or higher in Computer Science Computer Information Systems or similar; or equivalent experience.
- Ability to write functional Terraform or equivalent infrastructure as code language or scripting language
- Experience with Groovy for Jenkins pipeline file development.
- Experience managing AWS native security services: Guard Duty Security Hub Trust Advisor Organization Delegated Administrator IAM KMS.
- Experience managing GCP native security services: Security Command Center IAM Google Cloud Storage Logs and Log Sinks.
- Working knowledge of common technical controls across security domains (logical access configuration management security operations etc.)
- Excellent analytical and problem-solving skills with the ability to identify mitigate and communicate risks effectively to stakeholders.
- Experience deploying Cloud Security Posture Management (CSPM) platform technologies on public clouds.
- Working knowledge of public cloud container technologies such as ECS EKS GKE etc.
- Ability to balance multiple priorities at a given time.
- Must be team oriented and have a customer first mindset.
Bonus (if applicable):
- Ability write functional Python Go or Ruby
- Experience managing commercial security tools and platforms.
- Knowledge of Open Policy Agent Rego.
- Understanding of Git and GitOps concepts.
- Experience working in a fast paced e-commerce environment.
- Experience investigating security incidents in public clouds (AWS Google.)
Employment Type
Full Time
