- Company Name
- Ivalua
- Job Title
- Senior Offensive Security Engineer – Infrastructure & Cloud (Senior Security Engineer)
- Job Description
-
**Job Title**
Senior Offensive Security Engineer – Infrastructure & Cloud (Senior Security Engineer)
**Role Summary**
Lead the design, implementation, review, and monitoring of technical security controls for a cloud‑based procurement platform’s hosting, corporate infrastructure, and networks. Conduct vulnerability management, penetration testing, incident response, and compliance support, while acting as the primary SME for infrastructure and cloud security.
**Expectations**
- Minimum 5 years of hands‑on experience in infrastructure/network security engineering and architecture.
- Minimum 5 years of hands‑on network and/or cloud penetration testing.
- Strong scripting skills (Python, PowerShell).
- Proficiency with Azure services (EntraID, Key Vault, Sentinel, NSG, firewall).
- Knowledge of CNAPP, CSPM, MDM, IAM, DDoS, Active Directory, cryptography, and security incident response.
- Ability to collaborate across IT, R&D, SOC, and GRC teams, manage multiple priorities, and meet deadlines.
**Key Responsibilities**
- Perform technical security design, architecture, change, and configuration audits/reviews of Azure cloud environments, servers, network devices, endpoints, and security technologies (CNAPP, MDM, WAF, DDoS).
- Serve as SPOC for vulnerability management: scanning, third‑party penetration testing, red teaming, analysis, and retesting of findings.
- Collaborate with SOC to enhance detection and response processes and capabilities.
- Support security initiatives for Azure environments: EntraID Conditional Access, CSPM, Infrastructure‑as‑Code, NSG rule reviews.
- Provide technical support to GRC on compliance initiatives (FedRAMP, PCI, NIST 800‑53 r5, IRAP, SANS CIS 20) and answer technical security questions from customers and prospects.
- Act as SME on infrastructure and cloud security, share knowledge, and collaborate with internal teams to improve architecture and operational efficiencies.
**Required Skills**
- Infrastructure & network security engineering/architecture (CNAPP, CSPM, MDM, IAM, DDoS).
- Network and cloud penetration testing.
- Scripting (Python, PowerShell).
- Active Directory concepts, protocols, hardening.
- Cryptography (algorithms, protocols, key/certificate management).
- Azure security services (EntraID, Key Vault, Sentinel, NSG, firewall).
- Security incident response and investigation.
- Familiarity with security standards/compliance: OWASP, NIST, FedRAMP, PCI, SANS CIS 20.
- Strong collaboration, multitasking, and deadline‑management skills.
**Required Education & Certifications**
- Bachelor’s degree in a related field or equivalent professional experience.
- Evidence of or pursuit of security certifications such as OSCP, eJPT, AZ‑500, GIAC GPEN, or comparable credential.