SecOps Engineer

Job Description

The Infrastructure team is the engine behind everything we do, ensuring that our services run smoothly for both internal teams and external customers. From managing cloud hosting and physical infrastructure to securing corporate applications and devices, this team keeps the wheels turning—and our systems secure. As a SecOps Engineer, you’ll play a key role in protecting the company’s digital landscape. This isn’t just about reacting to threats; it’s about staying ahead of them. You’ll actively maintain and monitor our cloud security posture, tackle risks head-on, and shape the tools and processes that keep our systems safe. What You’ll Do: Implement and improve security measures across networks, systems, and applications. Conduct assessments and manage penetration testing to uncover and address security gaps. Monitor security logs for suspicious activity and respond to incidents swiftly. Help refine and update security policies to align with evolving threats and industry standards. Lead efforts to restore operations after security breaches, minimizing disruption. Work closely with developers and IT teams to bake security into the software lifecycle. Provide detailed risk reports to support decision-making at the Security Committee level. Assist with business continuity and disaster recovery planning and testing. As part of the Infrastructure team, you’ll also: Collaborate with teammates to meet ambitious project goals. Embody our core values: Collaboration, Ownership, Flexibility, and Continuous Improvement. Build and manage strong relationships with network and security vendors to ensure value and reliability. Support and drive Agile practices to keep our team nimble and effective. Share your expertise with the broader Tech team and take charge of your own learning journey. Must-Haves: At least 2+ years working with AWS, GCP, or similar public cloud platforms. 1+ years in a security role or 2+ years in cloud/devops engineering with demonstrated cybersecurity experience. 2+ years securing and managing multiple OS environments. Familiarity with Gudarduty, CrowdStrike, Intrusion detection, SIEMs, log management, and vulnerability scanners. Understanding of web technologies, architectures, and protocols. Solid grasp of NIST, ISO 27001, or similar frameworks. Ability to assess risks and solve technical problems quickly, even in new situations. Strong collaboration and communication skills, a positive attitude and a proactive mindset. Nice-to-Haves: Industry certifications like CISSP, CEH, or AWS SysOps Administrator/AWS Security Specialty. Experience with Sophos, Google Workspace, or vendor management. Scripting skills in Python, Bash, or PowerShell. Hands-on experience with security reporting or management tools. At Canstar Group, our inclusive vision is to create a workplace where our people feel safe and confident to bring their unique selves to work. We are committed to celebrating each individual’s unique backgrounds, experiences, abilities and perspectives. As an Equal Opportunity Employer, we invite applications from all individuals regardless of race, national origin, gender, sexual orientation, age, religion, or disability. If you have a disability or specific access needs, we encourage you to discuss any adjustments you may need to our recruitment process. How Can You Join The Team: If this sounds like you, and you are up for a fresh challenge with a great company, please click apply now and ensure that your CV and cover letter has been uploaded to your profile. #J-18808-Ljbffr