Infrastructure Security Tester / Consultant

About the role

We are looking for an experienced Infrastructure Security Tester/Consultant to join our security testing team. You will assess the resilience of cloud‑native platforms and modern infrastructure, working alongside seasoned security professionals to identify risks and support remediation.

Key responsibilities

• Perform security assessments across cloud, containerized, and Kubernetes environments.
• Review Infrastructure as Code (Terraform, Bicep, ARM, Helm, Kubernetes manifests) for misconfigurations and risks.
• Evaluate CI/CD pipelines, secrets management, encryption, logging, monitoring, and access‑management practices.
• Validate Kubernetes and container security controls such as RBAC, network policies, and runtime protection.
• Retest remediated findings and verify the effectiveness of implemented controls.
• Produce evidence‑based findings, risk assessments, and remediation recommendations.
• Provide practical guidance to engineering and architecture teams on infrastructure hardening and secure‑by‑design principles.

Required profile

• Minimum 8 years of experience in infrastructure security testing within cloud‑native environments.
• Strong understanding of Kubernetes, containers, cloud security, and Infrastructure as Code.
• Proven experience assessing CI/CD security, identity and access management, secrets management, and encryption controls.
• Familiarity with infrastructure monitoring, logging, and security telemetry.
• Excellent communication skills to convey technical findings clearly.

Required skills

• Kubernetes
• Containers (Docker, etc.)
• Cloud platforms (AWS, Azure, GCP)
• Infrastructure as Code (Terraform, Bicep, ARM, Helm, Kubernetes manifests)
• CI/CD pipeline security
• Identity and Access Management (IAM)
• Secrets management
• Encryption controls
• Monitoring and logging tools