Cloud Security Engineer

This is us

At Avenga, we believe that human creativity empowers technology that matters. Operating globally, our 6000+ specialists provide a full spectrum of services, including business and tech advisory, enterprise solutions, CX, UX and Ul design, managed services, product development, and software development.
 

This is the job
We are looking for a Cloud Security Engineer to join our team and help strengthen the security posture of modern cloud-native environments. In this role, you will focus on securing Kubernetes workloads, implementing runtime threat detection with Falco, integrating security monitoring with SIEM platforms, and collaborating closely with Platform and DevOps teams to embed security best practices into deployment pipelines.

This is an excellent opportunity for a security professional with hands-on Kubernetes experience who enjoys building proactive security controls and improving operational security processes.

This is you

• Hands-on experience securing Kubernetes deployments and containerized workloads.
• Strong knowledge of Linux operating systems and system administration.
• Experience with SIEM platforms such as Splunk, Rapid7, ELK, QRadar, or similar.
• Experience working with Kubernetes security best practices, including RBAC, Pod Security Standards, and workload protection.
• Practical experience with command-line tools and scripting.
• Proficiency in scripting with Python, Bash, PowerShell, or AWS Lambda.
• Experience investigating, triaging, and responding to security incidents.
• Strong analytical and problem-solving skills with the ability to correlate security events across multiple systems.
• Experience working with Helm charts, values files, and Kubernetes deployment templates.
• Good communication skills and Upper-Intermediate English or higher.

Nice-to-have skills:

• Hands-on experience deploying and managing Falco in Kubernetes environments.
• Experience with cloud platforms such as AWS, Azure, or GCP.
• Knowledge of Infrastructure as Code (Terraform, CloudFormation) and CI/CD security.
• Experience with container image scanning and vulnerability management.
• Security certifications such as CKS, Security+, CISSP, or similar.
• Familiarity with compliance and security frameworks (CIS Benchmarks, NIST, MITRE ATT&CK).

This is your role

• Assess and improve the security posture of Kubernetes environments by identifying risks and implementing security best practices.
• Design, deploy, configure, and maintain Falco for Kubernetes runtime threat detection.
• Customize Falco rules and integrate alerts with SIEM, logging, monitoring, and incident response platforms.
• Review and secure Helm charts, deployment templates, and Kubernetes configurations.
• Support the investigation and triage of Kubernetes runtime security alerts and security incidents.
• Create and maintain security documentation, playbooks, and operational runbooks.
• Collaborate with Platform, DevOps, and Security teams to embed security controls into Kubernetes deployment workflows.
• Continuously improve Kubernetes runtime security monitoring, detection capabilities, and operational processes.