4 days ago
Remote, United StatesStaff+
Responsibilities
- Develop and maintain security tooling, guidelines, standards, runbooks, and incident response documentation.
- Author cloud-native security policies with DevSecOps teams and integrate infrastructure-as-code scanning into IaaS deployments.
- Automate vulnerability mitigation and manual security tasks across cloud-hosted systems.
- Conduct threat intelligence and forensic analysis exercises to predict and prevent attacks.
- Configure CNAPP protections, prioritize cloud and pipeline risks, and integrate findings with SIEM platforms.
- Create and monitor correlated SIEM event dashboards and develop alert thresholds.
- Research AI-driven threats and translate them into detections, controls, and engineering guidance.
- Secure AI tool connections to security data sources using MCP and assess MCP server, permission, and data-access risks.
- Configure protections for email, hosts, and identities and provide actionable risk reporting to engineering teams and leadership.
Requirements
- Bachelor's degree in Computer Science or a related discipline, or an equivalent combination of education and experience.
- At least 6 years of experience in systems engineering, software engineering, security, or related work.
- Experience with Git, Jira, Confluence, cloud services, infrastructure-as-code, scripting, configuration management, containers, CI systems, and databases.
- Knowledge of Windows or Linux shell scripting and Python or a similar programming language.
- Knowledge of AWS, Linux, CloudFormation, Terraform, Ansible, Puppet, Chef, Jenkins, Microsoft SQL Server, PostgreSQL, and MongoDB.
- Knowledge of AI-assisted development and security tools, MCP, CNAPP platforms, SIEM and log correlation, and AI-driven threats and defenses.
- Certifications such as AWS, GCP, OCSP, or CEH are relevant or preferred.
- Ability to collaborate effectively, communicate clearly, prioritize work, multitask, and meet deadlines in a fast-paced environment.
Tech Stack
AnsibleAWSChefGitGoogle Cloud PlatformJenkinsLinuxMicrosoft SQL ServerMongoDBPostgreSQLPuppetPythonTerraformWindows
Categories
About NextGen
NEXTGEN is an Australia-based technology services and value-added distribution company that helps vendors and channel partners sell cybersecurity, cloud, enterprise software, and data management solutions. It offers software licensing, compliance and audit services, data centre and storage solutions, and go-to-market and digital marketing support. Founded in 2011 and headquartered in North Sydney, it is now part of Exclusive Networks, expanding its reach across international markets.