Listing Description

Overview

Fivetran is building data pipelines to power the modern data stack for thousands of companies. We’re looking for a  Senior Azure Cloud Security engineer to join Fivetran’s security team. In this role you will function as a security expert interfacing with Fivetran’s site reliability team (SRE) to ensure  our data pipeline service is properly configured to follow security best practices while at the same time improving performance and reliability of the services.

The work is very diverse — Fivetran is a multi-cloud environment operating on AWS, GCP, and Azure. You will help select security tools as well as implement improvements within our environments and assist in developing new processes to raise our security posture. 

Technologies we use: Azure, AWS, GCP, Kubernetes, Docker, CI/CD - CircleCI/Jenkins, Terraform, Github

What You’ll Do

• Help identity security gaps and configure Azure/AWS/GCP accounts to comply with best practices and security standards


• Validate and assist with remediation of security issues in infrastructure and cloud workloads


• Build automation and monitoring systems to enforce security policies and detect threats


• Drive adoption of a security-minded culture across engineering functions


• Report out on performance and trends of projects and security tooling


• Develop internal documentation surrounding cloud incident response and best practices

What You'll Bring

• Experience with securing Azure Cloud architectures


• Collaborative experience working closely with product teams, SRE/DevOps, and developers to define security requirements


• Proven ability to secure public cloud based infrastructure, architect secure solutions, and configure cloud nave security controls.


• Experience in container-based deployments, container scanning tools, and orchestration tools (e.g. Kubernetes, Docker, GKE, AquaSec, Twistlock)


• Experience with (at least one) automation tools - CloudFormation, Terraform, Ansible, Chef, Puppet or Lambda


• Architect, deploy, and maintain security tools and services including, but not limited to: WAF, Anomaly Detection, Vulnerability Management, and Threat Detection


• Ability to research and validate security vulnerabilities, and propose solutions for remediation or mitigation


• Possess working knowledge of encryption and key management fundamentals