About the opportunity
Contentful strives to build a secure and safe service and commits considerable effort and resources to cybersecurity and information protection.
As a Cloud Security Engineer at Contentful, you will be part of the Security Engineering team responsible for securing our production environment. This position focuses on the security of our cloud environment, working closely with infrastructure and product teams to design and engineer infrastructure security features in the platform.
What to expect?
- Collaborating with software engineers and Engineering leadership to determine security requirements for new projects
- Evaluating new technologies for the prevention, detection and response of cybersecurity incidents
- Performing environment hardening in alignment with AWS and Kubernetes good practice
- Creating tools and automation to improve the effectiveness of security engineers and operators.
- Identifying Contentful platform security improvements and collaborating with Engineering and Product teams to appropriately prioritise implementation.
- Promoting security best practices and patterns during technical architectural reviews.
What you need to be successful?
- Experience with implementing security capabilities for CI/CD pipelines
- Practical experience with threat modelling cloud-native applications and infrastructure
- Thorough understanding of infrastructure as code and immutable infrastructure security
- Experience with enterprise secrets management
- Experience with implementing least-privilege access models and role-based access control across AWS and Kubernetes
- Familiarity with cloud-native authentication and authorization technologies
- Experience with implementing security capabilities for CI/CD pipelines
- Practical experience with threat modelling cloud-native applications and infrastructure
- Thorough understanding of infrastructure as code and immutable infrastructure security
- Experience with enterprise secrets management
- Experience with implementing least-privilege access models and role-based access control across AWS and Kubernetes
- Familiarity with cloud-native authentication and authorization technologies
Nice to have
- Familiarity with MITRE ATT&CK framework and penetration testing methodologies
- Familiarity with compliance frameworks and their practical application within cloud-native environments: ISO 27001, Sarbanes Oxley.
What's in it for you?
- Join an ambitious tech company reshaping the way people build digital products.
- We set you up for success, equipping you with the latest and greatest hardware
- Enjoy a full range of events, including workshops, Contentful-hosted meetups, guest speakers and team activities. Meet your team members from across the globe at our annual offsite.
- Get fit! We offer a variety of health and fitness classes and a discount on Urban Sports Club.
- We value our employees health and safety. Our teams are working remotely during the COVID pandemic.
- Use your personal education budget to improve your skills and grow in your career. Join a free German class or one of our many internal learning initiatives!
- Plus, Contentful socks! Oh yeah!
#LI-BR1
Who are we?
Contentful is the leading content platform that powers digital experiences for over 30% of the Fortune 500 companies and thousands of global brands. Our platform unifies content in a single hub, structures it for use in any digital channel and integrates seamlessly with hundreds of tools through open APIs. It lets developers and content creators work in parallel, increasing team efficiency and happiness. Companies such as Shopify, Staples, Atlasssian, Electronic Arts, Chanel, Roche, Vodafone use Contentful to build their mobile and web products, voice controlled apps and more.
We’re growing rapidly and we have secured over $330 million in funding from top-tier partners such as Tiger Global, Sapphire Ventures, Salesforce Ventures, General Catalyst and Benchmark.
More than 650 people from 70 nations contribute their energy and creativity to Contentful, working from hubs in Berlin, San Francisco, Denver and distributed around the world.
Everyone is welcome here!
“Everyone is welcome here” is a celebrated component of our culture. At Contentful, we strive to create an inclusive environment that empowers our employees. We believe that our products and services benefit from our diverse backgrounds and experiences and are proud to be an equal opportunity employer. All qualified applications will receive consideration for employment without regard to race, color, national origin, religion, sexual orientation, gender, gender identity, age, physical [dis]ability, or length of time spent unemployed. We invite you to apply and join us!
If you need reasonable accommodations at any point during the application or interview process, please let your recruiting coordinator know.
By clicking “Apply for this job,” I acknowledge that I have read the “Contentful’s Candidate Privacy Notice”, and hereby consent to the collection, processing, use, and storage of my personal information as described therein.
