Platform Cloud Security Engineer

Platform Cloud Security Engineer

Full Time

US

Flashfood is looking for a talented Platform Cloud Security Engineer to make a difference in making applications that help with helping divert food waste. The individual will lead the way for the expansion of the Platform Security Engineering program at Flashfood. The mission for the team is to proactively discover, to fix security vulnerabilities and to implement solutions that automate, scale and enhance cloud security. We’re looking for someone who is just as passionate about architecting key areas of cloud security as well as partnering with the platform teams to securely build and fortify our applications. The key areas of focus for the Platform Engineering program are: Deploy Secure Networks, Tools/DevSecOps and infrastructure vulnerability program.

Who We Are:

With the rising cost of food and the challenges faced by our supply chain, Flashfood has become a staple in many families in North America. At Flashfood, we are on a mission to reduce the environmental impact of food waste and provide our communities with easier access to healthy, affordable food. We are tackling this gigantic problem with a diverse team of people from all different walks of life.

When food gets thrown out, most times it ends up in a landfill and gets covered by other garbage, rotting and producing methane gas. Flashfood partners with grocery chains to allow them to sell surplus food through the Flashfood app at significant discounts for its users while reducing store-level food waste.

We take great pride in our accomplishments and are honored to be recognized as one of Fast Company’s World’s Most Innovative Companies for 2023, ranking #1 in the Social Good Category. This acknowledgment reaffirms our commitment to driving positive change in the industry. Flashfood has also been designated as a Great Place to Work and our team is growing! As we continue to grow, we are focused on fostering a culture of inclusion, where every individual feels valued, respected, and empowered to thrive

Who You Are:

• Expert level knowledge in network protocols to include TCP/IP, SDN, SD-WAN, GRE, cloud/hybrid-based networking
• Expert level knowledge in network security solutions including Next-Gen Firewalls, load balancers, WAF, proxies, VPN, etc.
• Strong knowledge of Kubernetes and Azure cloud technologies.
• Working knowledge of related security technologies including SIEM, CASB, Mobile Security, etc.
• Strong verbal and written communication skills.
• Experience in analyzing systems designs and code, and identifying security problems
• Good programming skills in Python, Golang, or JS
• Experience with deployment orchestration, automation, and security configuration management (Jenkins, Puppet, Chef,CircleCI etc).
• Experience working with cloud security and governance tools, cloud access security brokers (CASBs), and container technologies(Kubernetes, Helm, Terraform Hashicorp Vault).
• Working knowledge of common and industry standard cloud-native/cloud-friendly authentication mechanisms (OAuth, OpenID, etc).
• Experience with service-oriented architecture for cloud-based services.

Nice to Have:

• Understanding of regulatory compliance frameworks such as NIST, SOC 2
• Understanding of MITRE framework and threat intelligence
• Certifications AWS or Azure network/security certifications, Hashicorp Certifications, OSCP

What You’ll Do:

• Propose solutions for secure platform design, DevSecOps automation, tool optimization, application vulnerability management and strategies for risk reduction
• Collaborate with Security Architects, Product Managers, Program Managers, and other teams to deliver high-quality products.
• Build relationships with Infrastructure teams and Software Development teams.
• Work with multiple internal teams to ensure products are designed and implemented according to security policies, standards, and best practices.
• Work closely with platform engineers to implement industry leading cloud security technical solutions by understanding requirements
• Work as a subject matter expert to deliver network and cloud projects from initiation through to successful implementation
• Create detailed documentation including logical designs, physical designs, bill of materials, as-built diagrams, knowledge transfer materials, FAQs, and transition to operations information
• Propose product feature enhancements to enhance security of our application
• Test, replicate and validate security vulnerabilities in applications
• Perform threat modeling of upcoming features and products
• Drive adoption of Policy as Code, adherence to software security metrics
• Practical knowledge and experience working in public cloud environments & IAM solutions (Azure, AWS,GCP etc.)
• You have a “can do” attitude. Our teams create high-quality work on quick timelines. Owning a problem doesn’t scare you, but rather empowers you to take 100% responsibility for achieving our mission.
• You appreciate direct communication. You’re both an active communicator and an eager listener - because let’s face it, you can’t have one without the other. You’re cool with candid feedback and see every setback as an opportunity to grow.

Company Perks

• Competitive base salary
• Company-wide performance bonus
• Ownership via option grants
• Casual and remote-friendly work environment
• Flexible working hours
• Extra long weekends April to September
• Maternity & Parental Leave Top Up Plan
• Professional development budget
• Paid time off for volunteering
• Monthly Flashfood credits

The requirements listed in job descriptions are guidelines, not hard and fast rules. You don’t have to satisfy every requirement or meet every qualification listed. If your skills are transferable and you are in the ballpark with the number of years of experience Flashfood is looking for, apply. Applying gives you the opportunity to be considered.

Flashfood is an equal opportunity employer and is committed to providing an accessible recruitment process. Please advise should you need any accommodation throughout the recruitment process. All your information will be treated confidentially