Cloud Security Engineer

Responsibilities

• Assess and improve the security posture of Kubernetes environments by identifying risks and implementing best practices
• Design, deploy, configure, and maintain Falco for Kubernetes runtime threat detection
• Customize Falco rules and integrate alerts with SIEM, logging, monitoring, and incident response platforms
• Review and secure Helm charts, deployment templates, and Kubernetes configurations
• Support the investigation and triage of Kubernetes runtime security alerts and security incidents
• Create and maintain security documentation, playbooks, and operational runbooks
• Collaborate with Platform, DevOps, and Security teams to embed security controls into deployment workflows

Requirements

• Hands-on experience securing Kubernetes deployments and containerized workloads
• Strong knowledge of Linux operating systems and system administration
• Experience with SIEM platforms such as Splunk, Rapid7, ELK, or QRadar
• Experience with Kubernetes security best practices, including RBAC and Pod Security Standards
• Proficiency in scripting with Python, Bash, or PowerShell
• Experience investigating, triaging, and responding to security incidents
• Experience working with Helm charts and Kubernetes deployment templates
• Upper-Intermediate English communication skills

Preferred Qualifications

• Hands-on experience deploying and managing Falco in Kubernetes environments
• Experience with cloud platforms such as AWS, Azure, or GCP
• Knowledge of Infrastructure as Code (Terraform, CloudFormation) and CI/CD security
• Experience with container image scanning and vulnerability management
• Security certifications such as CKS, Security+, or CISSP
• Familiarity with compliance frameworks like CIS Benchmarks, NIST, or MITRE ATT&CK

About the Company

Avenga is a global technology services provider with over 6,000 specialists. We provide a full spectrum of services, including business and tech advisory, enterprise solutions, product development, and managed services, helping to empower technology that matters.