Cloud Security Developer

We're looking for a Cloud Security Developer to join our dynamic team at nesto. In this role, you will play a critical role in designing, implementing, and maintaining cloud security solutions to protect our cloud-based systems and applications.

Requirements

• 5+ years of experience working on a team focused on infrastructure and/or security.
• 5+ years of development experience (ideally GoLang, TypeScript/JS).
• Knowledge of common web application vulnerabilities and the OWASP Top 10 framework.
• The ability to analyze and act on results from DAST and SAST tools (e.g., Tenable, Snyk).
• Skilled in DevSecOps principles and familiarity with CI/CD pipelines (GitHub Actions, Argo CD, Azure DevOps) to perform automated security testing.
• Experience deploying and customizing security tools to address threats and lower risk, including vulnerability scanners, static analyzers, web application firewalls (WAFs), intrusion detection/prevention systems (IDS/IPS), and endpoint security monitoring.
• A comprehensive grasp of cloud and network security, including an in-depth understanding of Kubernetes.
• Experience in GCP specifically with one or more of the following services: Security Command Center, GKE, Cloud IDS, Cloud Armor, and Secrets Manager.
• Experience in Azure specifically with one or more of the following services: Security Center, Azure PaaS App Services, VMs, Azure SQL, Front Door, and Key Vault.
• Experience writing infrastructure-as-code using tooling such as Terraform, Pulumi, and Helm.
• Knowledge of common security-related frameworks and benchmarks like CIS, NIST, and MITRE ATT&CK.
• An understanding of identity and access management (IAM) principles and cloud-native IAM solutions.
• Passionate about constant learning and sharing knowledge with others.

Benefits

• Premium benefits plan fully paid by nesto
• Comprehensive insurance
• Unlimited access to telemedicine and mental health services
• 4 weeks of vacation
• Best-in-Class Tools
• Access to the resources and tech you need to execute without friction
• Working framework: The environment that makes you productive and enables teamwork