NoFluffJobs Stacjonarnie Junior

Junior Infrastructure Security Engineer

Shiji Poland

⚲ Katowice

9 000 - 10 000 PLN (PERMANENT)

Wymagania

  • AWS
  • Linux
  • Security
  • Terraform (nice to have)
  • Kubernetes (nice to have)
  • Docker (nice to have)

Opis stanowiska

O projekcie:
Job Description

- You will be helping with designing and implementing security measures, to ensure that cloud environments are free from vulnerabilities and security risks.
- Internal communication regarding identified findings.
- No meetings with clients.

Technologies:

- Security related: Prowler, PMapper, Viz, Nmap,
- Cloud related: AWS, Tencent, Aliyun, Oracle Cloud, WAF, Terraform, Python,
- Linux operating system and services.

Sounds good? Let’s talk! 😊

Shiji Group provides software solutions and services for the hospitality, food service, retail and entertainment industries, ranging from hotel management solutions, to food and beverage and retail systems, payment gateways, data management, online distribution and more.

Founded in 1998 as a network solutions provider for hotels, and later changed to a software provider for the whole consumer market, Shiji Group today comprises 5,000 employees in 80+ subsidiaries and brands, serving over 91,000 hotels, 200,000 restaurants and 600,000 retail outlets.

Shiji is committed to connecting the global business of hospitality. We provide an integrated suite of technological solutions that empower hotel, retail, food, and entertainment companies to better connect with their guests.

Daylight PMS is a distributed system that serves the hospitality industry. It is a solution that allows hotel employees or hotel managers to handle various activities such as managing reservations, payments and hotel services within the hotel or between hotels. The system consists of many domain-oriented microservices developed under a few cross-functional teams.

Wymagania:
- Minimum 1 year of commercial experience in a similar position- basic understanding of cloud environments like 90% AWS, 10% multicloud (Tencent, AliYun, - Oracle Cloud, Azure),- basic understanding of cloud related risks,- basic understanding of IaC concept,- linux working knowledge,- basic understanding of CI/CD security concepts,- knowledge of cloud security audit methodologies,- strong communication skills.Nice to have:
- knowledge of Terraform,
- knowledge of containers/Kubernetes,
- cloud environment audits and IaC code review skills,
- certificates related to cloud environments (e.g. AWS Certified Cloud Practitioner, AWS Certified Developer – Associate, Tencent Cloud Practitioner).

Please note that:

We are looking for candidates based in the Silesia region (office in Katowice). Fully remote work is not an option, and unfortunately, applications from more distant locations will not be considered in the recruitment process.

Codzienne zadania:
- conducting basic security audits of the cloud environments, conducting solutions review & threat modelling,
- creating reports from conducted security audits and solutions reviews,
- helping with creating technical documentation of security requirements,
- cooperation and substantive support in fixing security issues,
- supporting SOC/NOC Team during security incidents,
- helping with security tools implementation and maintenance,
- helping with access management among various cloud environments.

🔍 Dekoder Ogłoszenia

🔴
You will be helping with designing and implementing security measures, to ensure that cloud environments are free from vulnerabilities and security risks.
Twoja rola będzie polegać głównie na wspieraniu bardziej doświadczonych inżynierów w tworzeniu i wdrażaniu zabezpieczeń, a nie na samodzielnym projektowaniu od podstaw.
🔴
Internal communication regarding identified findings.
Będziesz głównie zgłaszać znalezione problemy innym zespołom, a nie aktywnie je rozwiązywać lub podejmować kluczowe decyzje dotyczące bezpieczeństwa.
🟡
No meetings with clients.
Oznacza to, że będziesz pracować wyłącznie wewnątrz firmy, co może ograniczać ekspozycję na szersze konteksty biznesowe i interakcje z użytkownikami końcowymi.
🟡
Junior Infrastructure Security Engineer
Stanowisko juniorskie sugeruje, że oczekuje się od Ciebie nauki i rozwoju pod okiem bardziej doświadczonych kolegów, a nie samodzielnego podejmowania strategicznych decyzji.
🟡
Technologies: Security related: Prowler, PMapper, Viz, Nmap, Cloud related: AWS, Tencent, Aliyun, Oracle Cloud, WAF, Terraform, Python, Linux operating system and services.
Lista technologii jest dość szeroka i obejmuje wiele różnych obszarów, co może oznaczać, że będziesz musiał pracować z wieloma narzędziami i platformami, a nie tylko z kilkoma wyspecjalizowanymi.