Company Description
We are Software Mind, an awesome team of engineers who are ready to ramp up any top-notch company’s projects! Our aim? To always be one step ahead. Become part of a multicultural company in constant growth with an excellent work environment certified by Great Place To Work!
Job Description
Security-first engineer focused on cloud operations and DevOps, with a strong emphasis on hands-on vulnerability remediation and implementation.
Key Responsibilities
- Own the continuous vulnerability remediation process across cloud environments
- Take outputs from security tools (CSPM, Wiz, Palo Alto Prisma) and implement fixes in production
- Perform image-level, server-level, and patch-level updates
- Work closely with development teams on testing, deployment, and releases
- Handle compliance mapping and validation (SOC 2)
- Conduct access control audits and ensure compliance adherence
- Make independent technical decisions with minimal oversight
- Collaborate directly with the security team (Linda, Fausto, Gerald)
- Contribute beyond security scope over time, evolving into broader team responsibilities
- Enforcing HTTPS on S3 buckets via CloudFront decisions
- Updating vulnerable dependencies (e.g., Python libraries)
- Creating and pushing updated container images to production
#LI-DNI
Qualifications
Required Skills & Experience
- Strong DevOps and cloud operations background
- Hands-on experience with AWS and Azure environments
- Proven ability in vulnerability remediation and implementation (not just identification)
- Experience working with security tools such as CSPM, Wiz, or Palo Alto Prisma
- Solid understanding of:
- Infrastructure and application security controls
- Patch management and system hardening
- Access control and compliance practices (SOC 2)
- Experience collaborating with engineering and security teams
- Ability to work independently and make technical decisions
Evaluation Criteria
- Cloud platform expertise (AWS + Azure)
- Strong understanding of security vulnerabilities and remediation approaches
- Practical experience implementing security controls in production environments
- Clear and effective cross-functional communication skills
Additional Information
Interview Process & Evaluation
- Two to three nterview structure planned
