4 days ago
Dublin, IrelandMid Level
Responsibilities
- Conduct technical security due diligence for acquisitions and identify vulnerabilities, technical debt, compliance gaps, and other risks.
- Build and implement post-acquisition security integration plans covering IAM, SSO, vulnerability management, cloud security, logging, monitoring, and data protection.
- Implement and improve security controls across AWS and other cloud environments using security platforms and established frameworks.
- Assess application and infrastructure designs, perform threat modeling, and recommend practical security improvements.
- Integrate security testing, vulnerability detection, and secrets scanning into CI/CD pipelines.
- Ensure applications, infrastructure, and acquired businesses align with eBay security policies and relevant regulatory and industry standards.
- Communicate security findings, prioritize remediation, and balance security requirements with business objectives across multifaceted teams.
Requirements
- At least 4 years of hands-on experience in cloud security, application security, or security engineering, with exposure to security assessments, M&A due diligence, or technical integrations.
- Practical experience securing AWS environments, including IAM, GuardDuty, Security Hub, KMS, VPC, CloudTrail, and Config.
- Understanding of secure software development, threat modeling, OWASP Top 10, and security testing tools such as Snyk, SonarQube, Veracode, Burp Suite, or OWASP ZAP.
- Experience with cloud security platforms such as Wiz or equivalent CSPM/CNAPP solutions, vulnerability management, secrets detection, and security monitoring tools.
- Familiarity with GitHub Actions, GitLab CI, Jenkins, or Harness and infrastructure-as-code tools such as Terraform or CloudFormation.
- Knowledge of container and Kubernetes security is advantageous.
- Understanding of IAM, SSO, Zero Trust principles, and SAML, OAuth, and OIDC authentication protocols.
- Familiarity with NIST, ISO 27001, GDPR, or PCI-DSS is beneficial.
- Experience with Azure or GCP is beneficial.
- CISSP, CCSP, OSCP, or AWS Certified Security certification is a bonus.
- Ability to communicate technical security risks clearly, collaborate across functions, influence security decisions, and recommend practical solutions.
Tech Stack
Categories
About TCGplayer
TCGplayer operates an online marketplace and software tools for buying and selling trading card games and related collectibles, serving hobby shops and individual sellers. It generates revenue through marketplace fees, seller subscriptions, and fulfillment programs such as TCGplayer Direct. An eBay subsidiary, the company provides authentication and logistics services that help stores list inventory at scale and reach buyers across the U.S. and internationally.