Infrastructure Security Engineer

Summary

Social Discovery Group is a group of social discovery companies developing platforms that help people connect online across cultures and regions. The Infrastructure Security Engineer will design and maintain Zero Trust infrastructure, harden endpoints, manage vulnerabilities, build SIEM monitoring capabilities, enforce network segmentation, and coordinate penetration testing and incident response.

Responsibilities

• Design, implement, and maintain Cloudflare Zero Trust architecture (Access, Gateway, Tunnel, One Client)
• Harden and protect endpoints through baseline configuration, patching, and EDR/antivirus management
• Run the infrastructure Vulnerability Management process: identify, assess, prioritize, and track remediation of vulnerabilities
• Build and maintain security monitoring capabilities, including onboarding new log/data sources into the SIEM
• Design and enforce network segmentation (VLANs, firewall zones, microsegmentation) to reduce lateral movement risk
• Coordinate infrastructure-focused penetration tests and drive remediation of findings
• Coordinate incident response for infrastructure security incidents

Skills

• 3+ years in **infrastructure/network security**
• Hands-on experience with **Zero Trust Network Access platforms;**
• Experience hardening and managing endpoints (baseline configuration, patching, EDR/antivirus)
• Experience **designing network segmentation** (VLANs, firewall zones, microsegmentation)
• Experience running a **Vulnerability Management process** (CVSS, prioritization, remediation SLAs)
• Experience **building/tuning SIEM detections** and onboarding new log/data sources
• Experience coordinating or leading incident response for infrastructure security incidents

Qualifications

Must Haves

• 3+ years in **infrastructure/network security**
• Hands-on experience with **Zero Trust Network Access platforms;**
• Experience hardening and managing endpoints (baseline configuration, patching, EDR/antivirus)
• Experience **designing network segmentation** (VLANs, firewall zones, microsegmentation)
• Experience running a **Vulnerability Management process** (CVSS, prioritization, remediation SLAs)
• Experience **building/tuning SIEM detections** and onboarding new log/data sources
• Experience coordinating or leading incident response for infrastructure security incidents

Benefits

• REMOTE OPPORTUNITY to work full-time
• Vacation 28 calendar days per year
• 7 wellness days per year (time off) that can be used to deal with household issues, to lie down and recover without taking sick leave
• Bonuses up to $5000 for recommending successful applicants for positions in the company
• 50% payment for professional training, international conferences, and meetings
• Corporate discount for English lessons
• According to the paychecks, if you are not eligible for corporate medical insurance, the company will compensate you with up to $ 1,000 gross per year per employee. This can be spent on self-purchase of health insurance or on doctor’s fees for yourself and close relatives (spouse, children)
• The company provides all employees with an equipped workplace and all the necessary equipment (table, armchair, wifi, etc.) in our offices or co-working locations
• In the other locations, the company provides reimbursement of workplace costs up to $ 1000 gross once every 3 years, according to the paychecks. This money can be spent on the rent of the co-working room, on equipping the working place at home (desk, chair, Internet, etc.) during those 3 years
• Internal gamified gratitude system: receive bonuses from colleagues and exchange them for our merchandise, team building activities, massage certificates, etc.