Security Engineer

About This Role

This role focuses on protecting Kubernetes-based and cloud-native environments, securing data center networking and infrastructure, strengthening security posture, identifying and mitigating risks, and enabling secure software delivery practices. You will work closely with engineering, platform, and operations teams to integrate security into Era4's proprietary cloud infrastructure, data center networks, CI/CD pipelines, containerized workloads, GPU-accelerated compute, and AI/ML platforms. The successful candidate will combine hands-on technical expertise with a proactive approach to threat detection, vulnerability management, and security automation across brownfield-to-modern bare metal and cloud infrastructure environments.

Responsibilities

• Design, implement, and maintain security standards and controls for on-prem Kubernetes
• Review infrastructure architectures and perform security assessments to identify risks and recommend mitigations
• Integrate security controls into CI/CD pipelines, including SAST, DAST, dependency scanning, container image scanning, and secrets detection
• Partner with development teams to implement secure coding practices and remediate security findings
• Conduct threat modeling and security reviews for new applications, services, and infrastructure changes
• Lead vulnerability identification, prioritization, remediation, and reporting activities across infrastructure and applications
• Develop and maintain security monitoring, alerting, detection capabilities, and incident response playbooks
• Investigate security incidents, perform root cause analysis, and coordinate remediation activities
• Build automation to improve security monitoring, compliance validation, vulnerability management, and incident response workflows
• Leverage Infrastructure as Code and policy-as-code frameworks to enforce security standards at scale

Requirements

• Experience in Security Engineering, Cloud Security, Dev Sec Ops, Infrastructure Security, or Data Center Security
• Hands-on experience with vulnerability management platforms and security assessment methodologies
• Familiarity with CI/CD security controls, secure software development practices, and supply chain security
• In-depth scripting and automation skills using Python, Bash, or similar languages

Nice to have:

• Experience securing AI/ML or GPU-based infrastructure, data center network security, firewalls, and network segmentation (Palo Alto firewalls, Opn Sense, Nokia networking, or similar)
• Familiarity with compliance frameworks such as SOC 2, ISO 27001, NIST CSF, CIS Benchmarks, or PCI DSS
• Experience with threat modeling, penetration testing, or red team engagements
• Security certifications such as CISSP, GSEC, GCIH, GCIA, CCSK, CCSP, or relevant cloud security certifications