вчера

Security engineer for cloud platforms

ориентир по рынку
вакансия зп не указана
в среднем 353 643 ₽
Загрузи резюме, чтобы видеть мэтчи с вакансиейЗагрузи резюме, чтобы видеть мэтч с вакой

подготовься к отклику

ai-инструменты

Чтобы адаптировать резюме под вакансию или составить сопроводительное письмо, загрузи резюме

описание

We power people’s progress. At Preply, we’re all about creating life-changing learning experiences. We help people discover the magic of the perfect tutor, craft a personalised learning journey, and stay motivated to keep growing. Our approach is human-led, tech-enabled - and it’s creating real impact. We’ve just reached unicorn status with a $150M Series D, accelerating our vision to transform education through human-led, AI-enhanced learning.

задачи

  • Own platform security across AWS, Kubernetes, and GCP, with a strong focus on detection, alerting, and incident response readiness
  • Lead key platform security initiatives end-to-end, from problem definition through rollout and iteration
  • Act as a strong technical voice in defining how platform security is designed, implemented, and operated at Preply
  • Evolve our monitoring from “we have a SIEM” to a detection and response capability that is effective, trusted, and actionable
  • Work hands-on with our current tooling, including Datadog as our SIEM, Okta as our primary IdP, and a range of SaaS platforms
  • Drive cross-functional platform security initiatives from problem definition to production rollout, partnering with SRE, Data, Engineering, and GRC
  • Strengthen cloud and platform security across AWS and Kubernetes, with expanding scope in GCP, through practical guardrails, secure patterns, and automation
  • Improve the robustness of access to internal infrastructure, including identity, privileged access, and auditability
  • Improve security of Kubernetes deployments, including cluster and workload security, policy enforcement, and secure workload identity patterns
  • Mature detection and response capability using Datadog
  • Improve log coverage and data quality (cloud, Kubernetes, CI/CD, identity, and key SaaS)
  • Build and tune actionable detections with clear severity, ownership, and expected frequency
  • Reduce noise through correlation, deduplication, enrichment, and continuous tuning
  • Establish repeatable triage workflows and clear escalation paths, being part of the Security on-call rotations
  • Create investigation playbooks and runbooks so alerts can be handled consistently and quickly
  • Partner with Data teams to improve monitoring for suspicious activity and sensitive access patterns, with an emphasis on practical, high-signal alerting
  • Improve secrets management and reduce exposure risk across CI/CD and runtime
  • Build security automation that makes the secure path the easy path for engineers

требования

  • Strong experience securing cloud and platform environments, especially AWS and Kubernetes, and the ability to extend that security approach into GCP
  • Hands-on experience driving and delivering technical security initiatives end-to-end in production environments
  • Strong understanding of the software development lifecycle, and comfort working with CI/CD and infrastructure as code
  • Practical experience improving identity and access security, with strong familiarity with Okta event monitoring and identity-focused detection patterns
  • Experience building or maturing security operations capability, especially turning SIEM inputs into reliable operational outcomes (triage, runbooks, tuning, and measurable improvement)
  • Experience improving logging coverage and signal quality, and building detections that are actionable rather than noisy (experience with Datadog SIEM is a plus)
  • Strong collaboration skills and the ability to influence decisions across SRE, Data, Engineering, and GRC
  • Business-oriented mindset and comfort making cost-benefit tradeoffs
  • Strong communication skills. Minimum C1 English level.
  • Willingness to participate in on-call rotations and partner effectively with SRE during incidents.
  • Будет плюсом: Terraform and infrastructure as code at scale; Jenkins hardening and CI/CD supply chain security controls; Cloudflare security controls (WAF, bot mitigation, edge protections); Scripting or programming for automation and tooling; Incident response experience in cloud-native environments (AWS and Kubernetes)

условия

  • An open, collaborative, dynamic and diverse culture;
  • A generous monthly allowance for lessons on Preply.com, Learning & Development budget and time off for your self-development;
  • A competitive financial package with equity and leave allowance;
  • The opportunity to unlock the potential of learners and tutors through language learning and teaching in 175 countries (and counting!).

Международная образовательная платформа для изучения языков с онлайн-репетиторами и AI-инструментами. Соединяет учеников с преподавателями по десяткам языков и работает в разных странах.

Подробнее о компании →

Если просят выйти из iCloud, прислать код из SMS, запустить или установить что-то, перевести деньги — не соглашайся: это мошенничество.

Если просят выйти из iCloud, прислать код из SMS, запустить или установить что-то, перевести деньги — не соглашайся: это мошенничество.