Back to jobs
Job Description
Senior Infrastructure Security Engineer
Department: Information Security Department
Employment Type: Full Time
Location: Cyprus
Description
You’ll be responsible for auditing and hardening cloud and bare-metal systems, securing CI/CD pipelines, and designing robust security controls for our Kubernetes-based environments. This role requires deep technical expertise in cloud security (AWS), infrastructure as code, and vulnerability management, as well as the ability to collaborate on architectural decisions and drive security improvements across infrastructure layers..
Key Responsibilities
- Perform regular security audits across cloud, bare-metal, CI/CD, auth systems, and logging infrastructure.
- Support external security audits and penetration tests; manage remediation of findings and misconfigurations.
- Contribute to architectural design of infrastructure services, providing security expertise throughout the lifecycle.
- Build and maintain vulnerability scanning processes using commercial and open-source tools; support remediation efforts.
- Maintain and evolve the internal security infrastructure using AWS, Kubernetes, and modern DevOps practices.
Skills, Knowledge and Expertise
- Minimum 3 years of practical experience in infrastructure security.
- Strong knowledge of AWS and cloud security best practices with experience protecting cloud infrastructures.
- Deep understanding of Kubernetes components including RBAC, Policy Engines, Network Policies, and Security Contexts.
- Proficiency with Terraform, Terragrunt, and Ansible for Infrastructure as Code.
- Experience creating custom playbooks and manifests.
- Experience developing pipelines in GitHub Actions or GitLab CI with understanding of pipeline security.
- Strong scripting skills in Python, Bash, and Golang for automating security operations.
- Experience implementing vulnerability scanning for both external perimeter and internal infrastructure using commercial and open-source tools.
- Experience with HashiCorp Vault and understanding of secrets management principles.
- Experience working with SIEM and developing detection rules for Linux, AWS, GCP, and Kubernetes.
- Familiarity with ISO 27001 and PCI DSS compliance standards.
- English level B2 for verbal and written communication with ability to explain complex concepts to non-technical stakeholders.
Why join us
- Help us challenge injustice by creating fair choices for millions of people across 1100+ cities in 48 countries.
- Develop your professional skills with access to mentoring, career consulting, and learning programs.
- Collaborate with teams around the world and gain international experience through our Global Talent Exchange Program.
- Engage in company-wide challenges, awards, sports activities, employee-led social impact and volunteering projects.
- Work alongside people who take initiative, speak openly, and challenge themselves to grow.
- Improve your language skills through co-financed courses and internal speaking clubs.