Senior Site Reliability Engineer

Summary

Join Rubrik's Information Security organization as a Security Engineer and partner with various business units to develop and implement security solutions. You will deploy and operate security solutions in cloud and datacenter environments, automate security tasks, manage critical applications and services, and define and monitor SLAs/SLOs. Incident management, post-incident analysis, and security logging management are key responsibilities. The role requires strong security engineering experience, proficiency in scripting and various technologies, and experience with relevant security frameworks. Flexible work hours and 24/7 on-call rotations are expected. Competitive salary, bonus potential, equity, and benefits are offered.

Requirements

• Bachelor degree in Computer Science or related field or equivalent experience
• 8+ years experience in security engineering, building and managing security solutions across the stack (on-prem and cloud)
• Strong understanding of logging and data management best practices and strong experience in any logging and/or SIEM platform
• Experience with Vault, Terraform, Puppet, Jenkins and Github
• Proficiency in any scripting language (Python, PowerShell, Perl, Ruby, shell, etc.)
• Working experience in GCP, AWS or Azure
• Operational knowledge of Linux and Windows systems
• Experience with with security automation and data management tools (XSOAR, Phantom, Snowflake, etc)
• Prior experience working in environments with NIST 800-53, NIST 800-171 controls or FedRAMP requirements

Responsibilities

• Deploy and operate security solutions and supporting infrastructure in cloud and datacenter environments in support of internal customer security needs and FedRAMP requirements
• Develop and automate Security tasks that span from Security Operations to Infrastructure as Code in support of InfoSec initiatives
• Manage the availability, capacity and configuration of InfoSec’s mission critical applications and services
• Define, measure and monitor SLAs & SLOs for systems and services with the objective of achieving and exceeding availability and reliability goals
• Manage and streamline monitoring systems to enhance observability and enable proactive identification of issues
• Coordinate and manage incidents, upgrades and changes for InfoSec’s applications and services
• Drive post-incident analysis with partner teams and/or vendors to identify root cause and ensure preventative measures are implemented promptly
• Assist in Security Incident investigations
• Manage a scalable and highly available solution for security logging and drive efforts of logging onboarding for increased security visibility
• Perform Production Readiness Assessments of new services to identify reliability needs and surface potential gaps
• Develop and maintain documentation and runbooks to reduce MTTR and inform future automation development
• Work cross functionally across global time-zones requiring flexible work hours
• Participate in 24/7 on-call rotations
• Know, acknowledge, and follow system-specific security policies and procedures
• Protect data and individual privacy per requirements and regulations
• Perform ongoing activities in compliance with service and contractual obligations
• Participate in role-based training, completing assignments on a timely basis
• Report security issues promptly, and aid investigation when needed
• Support controlled changes and vulnerability remediation activities
• Work collaboratively with Information Security in designing, implementing, assessing or enhancing system-specific security and privacy controls

Preferred Qualifications

• Security certifications are a plus (CISSP, CISM, SANS certs, vendor certs, etc.)
• Experienced knowledge of container technologies (Docker, Kubernetes, etc), microservices and CI/CD pipelines

Benefits

• Bonus potential
• Equity
• Benefits