Senior DevOps Security Engineer at Cast & Crew

California, United States

Apply Now

Not SpecifiedCompensation

Senior (5 to 8 years)Experience Level

Full TimeJob Type

UnknownVisa

Entertainment, Media, TechnologyIndustries

Requirements

8-10 years of experience in DevOps, specializing in identifying and resolving security vulnerabilities in infrastructure, applications (Java, Node.js, .NET), and databases (MSSQL, MySQL, PostgreSQL) hosted on Azure and AWS RDS
Expertise in ingress/egress network firewalls
Proficiency with security tools (e.g., Pentest, Orca, Nexus, Snyk) for vulnerability scans, penetration testing, and risk assessments
Proven expertise in leading AWS-based solutions, including architecting and managing AWS EKS for Kubernetes workloads, AWS Control Tower for governance, and services like EC2, S3, VPCs, IAM, and Security Groups (AWS experience mandatory)
Hands-on experience designing, deploying, and securing AWS EKS clusters, including cluster autoscaling, logging (e.g., CloudWatch), monitoring, and integration with CI/CD pipelines
Demonstrated ability to implement and manage AWS Control Tower for multi-account governance, compliance, and security policy enforcement
Experience with infrastructure-as-code practices using Terraform

Responsibilities

Design, implement, and maintain secure DevOps pipelines and infrastructure in AWS and Azure environments, adhering to cloud-native security best practices
Secure AWS RDS instances hosting MSSQL, MySQL, and PostgreSQL databases, including encryption, access controls, and vulnerability management
Identify, assess, and resolve security vulnerabilities in infrastructure, applications written in Java, Node.js, and .NET, and database systems
Configure and manage ingress/egress network firewalls to protect cloud, on-premises, and database environments from unauthorized access and threats
Utilize security tools such as Snyk, Pentest, Orca, Nexus, and others to perform vulnerability scans, penetration testing, and risk assessments across infrastructure and databases
Collaborate with development teams to integrate security into CI/CD pipelines, ensuring secure code deployment, infrastructure-as-code, and database configurations
Conduct security audits and ensure compliance with SOC controls (e.g., SOC 2), providing documentation and remediation plans for infrastructure and database security
Monitor and respond to security incidents using cloud security services and database-specific monitoring tools
Harden cloud infrastructure (e.g., IAM policies, encryption, network security groups) and database environments to mitigate risks and align with industry standards
Stay current on emerging security threats, tools, and best practices, providing actionable recommendations to enhance security posture
Mentor team members on DevOps security practices, including database security, to foster a security-first mindset

Skills

Key technologies and capabilities for this role

AWSAzureTerraformAWS EKSAWS RDSAWS Control TowerJavaNode.js.NETMSSQLMySQLPostgreSQLPentestOrcaNexus

Questions & Answers

Common questions about this position

What experience level is required for the Senior DevOps Security Engineer role?

The ideal candidate will have 8-10 years of experience in DevOps, specializing in identifying and resolving security vulnerabilities in infrastructure, applications, and databases.

What key technical skills and tools are needed for this position?

Required skills include expertise in AWS (mandatory, including EKS, Control Tower, EC2, S3, VPCs, IAM), Azure, Terraform for infrastructure-as-code, securing Java/Node.js/.NET apps, MSSQL/MySQL/PostgreSQL databases, network firewalls, and security tools like Snyk, Pentest, Orca, Nexus.

Is AWS experience required for this role?

Yes, proven expertise in leading AWS-based solutions is mandatory, including architecting and managing AWS EKS, AWS Control Tower, EC2, S3, VPCs, IAM, and Security Groups.

What is the work arrangement or location for this position?

This information is not specified in the job description.

What does the team collaboration look like in this role?

This role will collaborate with development, operations, and security teams to champion secure DevOps practices across the board.

Cast & Crew

Digital solutions for entertainment production management

About Cast & Crew

Cast & Crew provides a range of digital solutions tailored for the entertainment industry, focusing on production management for film, television, and live events. Their tools help streamline administrative tasks such as payroll, human resources, and production management, making it easier for production companies, studios, and independent filmmakers to operate efficiently. The company's offerings include payroll management tools, purchase order management, screenwriting software, and digital onboarding solutions, all designed to simplify complex processes. Unlike many competitors, Cast & Crew emphasizes a comprehensive suite of services that integrate various aspects of production management, ensuring accurate and timely payments, efficient document handling, and insightful data reporting. The goal of Cast & Crew is to enhance the operational efficiency of entertainment productions while supporting the industry, including initiatives for the Canadian entertainment sector.

Burbank, CaliforniaHeadquarters

1976Year Founded

ACQUISITIONCompany Stage

Data & Analytics, Enterprise Software, EntertainmentIndustries

1,001-5,000Employees