48 applicants

Company

Original Job Post

Chainalysis · 3 days ago

Security Engineer, Infrastructure

United States

Full-time

Remote

Entry, Mid Level

$95K/yr - $170K/yr

3+ years exp

Wonder how qualified you are to the job?

Maximize your interview chances

AnalyticsBlockchain

H1B Sponsorship

Insider Connection @Chainalysis

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Create and refine centralized logging systems to collect logs from diverse sources like nodes, containers, and applications.

Implement log collection and aggregation using tools such as Fluentd, Fluent Bit, or Logstash.

Connect logging systems to storage and analysis platforms including Amazon CloudWatch, Google Cloud Logging, and others.

Guarantee dependable and scalable log collection and storage for effective system monitoring and issue resolution.

Review and enhance existing logging pipelines to improve overall performance and reliability.

Perform thorough evaluations of cloud and infrastructure setups to pinpoint and rectify security misconfigurations.

Conduct security assessments on AWS and GCP configurations, network infrastructures, and access controls.

Apply industry-standard best practices and security frameworks to address discovered vulnerabilities.

Concentrate on improving IAM policies, VPC setups, storage bucket configurations, and ensuring compliance with standards like CIS benchmarks and NIST guidelines.

Enhance the overall security stance by eliminating vulnerabilities and ensuring adherence to best practices.

Build and enhance CI/CD pipelines by embedding security best practices throughout the development lifecycle.

Automate security testing within pipelines using tools for static analysis (SAST), dynamic analysis (DAST), and software composition analysis (SCA).

Utilize technologies such as Jenkins, GitHub Actions, Terraform, and various security scanning tools.

Ensure the secure construction, testing, and deployment of code, with ongoing monitoring and improvement of pipelines.

Advise on secure coding practices and promote a security-focused culture within development teams.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

KubernetesTerraformAWSGCPSASTDASTSCAInfrastructure-as-CodeSecure CodingCommunicationPrometheusGrafanaKubernetes operatorsPythonBashInfrastructure as codeAnsibleChefISO 27001SOC 2Incident responseCloud environmentsSecurity compliance standards

Required

Strong experience in designing, deploying, and managing secure cloud infrastructures using Kubernetes and Terraform.

Proficiency in AWS and GCP, with a focus on implementing and managing security services.

Experience using SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing), and SCA (Software Composition Analysis) to identify and remediate security vulnerabilities in software applications.

Hands-on experience with Infrastructure-as-Code (IaC) tools, particularly Terraform.

Excellent communication skills, both verbal and written, for effective collaboration with cross-functional teams.

Understanding of secure coding practices, though the primary focus is on infrastructure and cloud security.

Preferred

Experience with additional tools like Prometheus and Grafana, and familiarity with Kubernetes operators for managing logging and monitoring infrastructure.

Proficiency in scripting languages such as Python or Bash for automating security and logging tasks, and experience with infrastructure as code (IaC) tools like Ansible or Chef.

Hands-on experience with security compliance standards such as ISO 27001 or SOC 2, and prior involvement in incident response and management within cloud environments, especially in regulated industries like finance or healthcare.

Advanced Logging and Monitoring Tools: Experience with additional tools like Prometheus and Grafana, and familiarity with Kubernetes operators for managing logging and monitoring infrastructure.

Automation and Scripting: Proficiency in scripting languages such as Python or Bash for automating security and logging tasks, and experience with infrastructure as code (IaC) tools like Ansible or Chef.

Security and Compliance Expertise: Hands-on experience with security compliance standards such as ISO 27001 or SOC 2, and prior involvement in incident response and management within cloud environments, especially in regulated industries like finance or healthcare.

Company

Chainalysis

Glassdoor

3.3

Chainalysis provides blockchain data and analysis to governments, banks, and businesses worldwide.

Founded in 2014

New York, New York, USA

501-1,000 employees

https://chainalysis.com

H1B Sponsorship

Chainalysis has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)

Distribution of Different Job Fields Receiving Sponsorship

Trends of Total Sponsorships

2023 (11)

2022 (30)

2021 (7)

2020 (3)