Cloud Infrastructure Security Engineer
We're Clover, the largest cloud-based integrated commerce operating system for small and medium businesses. You've probably seen us in your favorite restaurants and shops; we support over 700k merchants worldwide and in 2022 processed over $240 billion card transactions. Clover enables merchants to accept payments, run their business and sell more. Come help us transform the way merchants do business, join Clover.
About the Team
This team’s primary responsibility is ensuring the security of Clover by building tooling and automation that supports application and platform engineering in writing and deploying secure code and infrastructure quickly.
This team consults with other engineering teams on architecture, security reviews, vendor selection and qualification, and training / best practices.
What you will do:
Improve the security posture of our infrastructure including our cloud environments
Collaborate cross functionally to make design/strategy decisions and advocate for security improvements.
Respond to infrastructure security alerts and perform investigations
Evaluate cloud architectures for security related concerns, and consult on mitigation options.
Implement and manage cloud, network, and system / OS-level security controls
Build and manage infrastructure for security-related applications / services
What you will need to have:
5+ years of relevant experience in security with 3+ years securing cloud platforms (e.g. IAM, VPC Security, KMS)
3+ years working with and hardening Linux environments (e.g. PAM, SELinux, SSHD, auditd)
Experience with IaC / configuration management technologies (e.g. Terraform, Puppet)
Knowledge of basic cryptography and common network protocols
Basic understanding of containers and related technologies (e.g. k8s)
What would be great to have:
Bachelors in Computer Science or similar area of study, or equivalent industry experience
Experience with HIDS and NIDS tooling
Experience securing large GCP environments
Experience with SIEM, SOAR, and/or XDR solutions
Experience with secrets management / PKI tooling (e.g. HashiCorp Vault)
CISSP, GCP/AWS Cloud Security Engineer, or similar certifications
Experience with SQL, and securing database technologies such as MySQL, Snowflake, etc
These pay ranges apply to employees in New York and California. Pay ranges for employees in other states may differ.