Senior Security Operations Engineer

Open source is our beating heart and it’s something that fuels our work and our culture. It’s where we began. It’s where we’ll always be. Our vision is to become the trusted open source data platform for everyone. We are a Cast of over 400 individuals (‘Crabs’) located across the globe. Why Crabs? Because we believe in thinking sideways. And right now, we’re looking for sideways-thinking Senior Security Operations Engineer.

We rely on our Infrastructure and Security Team to keep our physical and digital assets secure and functioning smoothly.

On the digital side, that means our IT systems and networks, while robust security is an essential element of our core offering, of course.

But our physical assets are just as important, with office locations in 10 different countries across four continents. In addition, many of our team members work remotely, adding further security challenges.

We employ a wide range of real estate and workplace managers, network engineers, cybersecurity specialists and IT administrators. Technical and communication skills are all part of their remit, along with an ability to think (and work) around problems. We are currently looking to add a Senior Security Operations Engineer to our team.

Who we are

So, how do we become the trusted open source data platform for everyone? By listening closely to our customers and taking action to ensure they achieve their business goals. You see, the software we create is merely a means of delivering value. Our thinking is customer-first. That’s why our customers are at the front and center of all we do. And in the spirit of sideways thinking, we’re by their side as well. Actively helping them solve their challenges. Collaborating. Sharing. And innovating. In other words, it really isn’t just about who we are. It’s about who our customers are – and where they want to be.

Our values

We want individuals who can embody our values of ownership, courage, and openness.

What does that mean in practice?

We take ownership of the problems we solve. What we do is about improving life for our customers, enabling them to meet their goals. So we own our decisions and mistakes. Sometimes that takes courage. But we don’t falter – we take on challenges with confidence. And right at our heart is openness. We’re always open to new ideas – from wherever and whoever they come.

The Role:

We are looking for an experienced security operations engineer to monitor and maintain security controls on our DBaaS platform and offerings.

The ideal candidate designs, implements and further develops security controls to protect and monitor Aiven’s production infrastructure including access and audit controls, data security and privacy, intrusion detection and prevention, and anomaly detection and remediation. In addition, the engineer would be expected to share their expertise to guide and grow other engineers and analysts skills in this realm and to improve security awareness overall.

What You'll Do:

This role contributes to the maturity of the Security Operations organisation by participating in various engineering projects, such as log source on-boarding, tooling integration, health checks, use case creation, process and procedure creation and improvement, and efforts to ensure reductions of false positives and avoidance of false negatives. You are knowledgeable and capable to assist and/or manage security incident response processes, investigations and digital forensics tasks. Responsibility for documenting and sharing knowledge acquired during your daily and incident related tasks is critical to the success of the team and the role.

What We're Looking For:

Don’t worry if your experience doesn’t line up perfectly – we still encourage you to apply! We believe in investing in our crabs’ professional growth.

Key requirements for success in this role include:

• Interest and demonstrated experience in defining, developing and monitoring Information Security software controls i.e. access controls, privilege escalation, anomaly detection
• 5+ years of Information Security experience
• Experience with any/all of the following: AWS, Azure, Google Cloud and their security capabilities
• Excellent Linux systems administration and networking skills.
• Solid development or scripting skills, preferably in python or Golang
• Understanding of the incident response process and enterprise information security fundamentals
• Knowledge of security operations analysis, detection and response processes and tools including, but not limited to, SIEM, IDS/IPS, EDR
• Experience in threat modeling as part of software development efforts
• Distributed systems knowledge
• Fluency in English, verbal and written

What we value:

• Relevant certificates, or wo