Cybersecurity Cloud Engineer - Container Security

- Serve as a hands-on Cyber Security Engineer focused on container security, developing standards/policies, designing and implementing controls, and supporting security measures across our infrastructure - Author, maintain, and disseminate container security standards, baseline configurations, and operational runbooks - Define control requirements for Kubernetes clusters and Docker environments (networking, RBAC, secrets, compliance, logging) - Engineer and deploy security controls unique to container operations across on-premises and cloud environments - Implement Kubernetes RBAC, NetworkPolicies, PodSecurity standards or alternatives, and admission controls (OPA/Gatekeeper/Kyverno) - Manage image security (registry governance, signing/verification, SBOM, vulnerability assessment) - Ensure runtime protection adhering to CIS benchmarks, syscall/behavior policies, workload isolation, and secrets management - Secure CI/CD integration by establishing gates for image scanning, IaC security checks, and policy initiatives - Oversee daily health and performance of deployed controls; troubleshoot issues related to clusters, workloads, and pipelines - Collaborate with platform engineering/SRE for triaging, remediation, and tuning policies without affecting delivery speed - Produce clear, actionable documentation: standards, architecture diagrams, procedures, FAQs, and guides - Provide training and guidance to engineering teams on adopting secure-by-default practices - Contribute to broader cybersecurity efforts such as vulnerability management, incident response for containerized workloads, audit support, and control assurance - Engage in threat modeling for new services and modifications - Manage daily workload by checking the SCRUM board for actionable items, participating in stakeholder meetings, and collaborating with security and infrastructure teams