SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Mondoo is building a platform to help companies protect their users and data from security threats globally. The company emphasizes great user experience and visual design to make it easier for teams to take action against attackers.
In this Senior Platform Engineer role, you will have direct impact on Mondoo's platform, including the policy engine, resource management, scaling, and multi-region functionality. You'll help teams assess, scope, prioritize, triage, and remediate security findings.
Key Responsibilities:
- Build, manage, and optimize cloud infrastructure using Infrastructure as Code (IaC) tools like Terraform and CloudFormation
- Automate system configurations using tools like Ansible, Puppet, or Chef
- Collaborate with teams to integrate infrastructure seamlessly with CI/CD pipelines
- Gain hands-on experience with policy as code frameworks (e.g., Open Policy Agent, HashiCorp Sentinel)
- Translate high-level security requirements into practical policy as code implementations for cloud and on-premises environments
- Support implementation and scaling of automated security controls in Kubernetes, cloud environments (AWS, Azure, GCP), and operating systems
- Stay current with infrastructure management and automation trends to maintain a robust, scalable system foundation
This position offers the opportunity to work with cutting-edge technologies and deepen expertise in security automation and policy-driven infrastructure.
REQUIREMENTS:
- Strong hands-on experience with IaC tools (Terraform or CloudFormation)
- Proficiency in configuration management tools (Ansible, Puppet, or Chef)
- Solid understanding of at least one major cloud platform (AWS, Azure, or GCP) and its core services
- Experience with container technologies (Docker) and orchestration tools (Kubernetes)
- Comfortable scripting in at least one language (Python, Bash, or similar)
- Knowledge of networking basics (TCP/IP, DNS, etc.)
- Experience with version control systems (Git)
- Strong problem-solving and analytical skills
- Willingness to learn and grow into a security-focused role
- Excellent communication and collaborative teamwork skills
PREFERRED:
- Familiarity with security tools and policy as code frameworks (Open Policy Agent, Sentinel)
- Knowledge of compliance standards (CIS, SOC 2, ISO 27001)
- Previous exposure to cloud-native security tools and services
- Relevant certifications in cloud platforms (AWS, Azure, GCP)
- Keen interest in security best practices and frameworks
As part of the application, candidates should share GitHub/GitLab repositories or a portfolio demonstrating experience with security policy implementation, policy as code, and cloud security tools.
