SlipstreamJobsFresh Startup & VC-Backed Jobs

Senior Infrastructure Security Engineer

inDrive - Nicosia, Cyprus - In-office

Apply on the company site

SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.

inDrive is seeking a Senior Infrastructure Security Engineer to lead security hardening and vulnerability management across cloud and on-premises infrastructure. You will be responsible for auditing and securing AWS cloud environments, bare-metal systems, CI/CD pipelines, and Kubernetes-based infrastructure. This role combines hands-on technical work with architectural collaboration, requiring you to design robust security controls, drive security improvements across infrastructure layers, and ensure compliance with industry standards. Key responsibilities include: - Performing regular security audits across cloud, bare-metal, CI/CD, authentication systems, and logging infrastructure - Supporting external security audits and penetration tests; managing remediation of findings and misconfigurations - Contributing to architectural design of infrastructure services with security expertise throughout the lifecycle - Building and maintaining vulnerability scanning processes using commercial and open-source tools; supporting remediation efforts - Maintaining and evolving internal security infrastructure using AWS, Kubernetes, and modern DevOps practices Requirements: - 3+ years of hands-on experience in infrastructure security, including vulnerability management across cloud and on-premises environments - Proficiency with cloud platforms (especially AWS) and Kubernetes, including applying security best practices and managing secure infrastructure - Strong knowledge of Infrastructure as Code tools (Terraform, Terragrunt, Ansible) and CI/CD pipeline security using tools like GitHub Actions or GitLab CI - Automation skills using scripting languages such as Python or Bash, with experience building tools and scripts to improve security operations - Familiarity with security compliance and monitoring, including secret management (e.g., Vault), SIEM tools, and standards like ISO 27001 or PCI DSS

Similar roles