jobapplier

Site Reliability Engineer (Application Security)

ContactMonkey

Skills

Required

  • AWS / Kubernetes / Terraform / security
  • application security
  • SRE
  • GitHub Actions
  • CD / Helm / Karpenter / KEDA
  • Ruby
  • MySQL
  • PostgreSQL
  • Linux
  • Python
  • Bash
  • JavaScript
  • Git
  • Rails / Node.js

Preferred

  • deployments
  • IAM
  • encryption
  • Docker
  • health checks

Join our team as a Site Reliability Engineer (Application Security) and help us push engineering forward in a rapidly changing world. You will work closely with our SRE and development teams to improve our production infrastructure, streamline deployments, investigate production issues, and address security risks. You will also help build the technical controls that support SOC 2 audits and GDPR compliance. Our environment includes AWS, Kubernetes on EKS, Terraform, Terragrunt, GitHub Actions, Prometheus, Grafana, and CloudWatch.

We value people who ask questions, explain their reasoning, and leave systems easier for others to understand

About ContactMonkey

Built useful monitoring with Prometheus, Grafana, or CloudWatch

We’re excited to work with someone who’s curious about what’s next, passionate about continuous improvement, and motivated to turn new ideas into real engineering progress

Responsibilities

  • Collaborer avec les équipes SRE et de développement pour améliorer l'infrastructure de production, rationaliser les déploiements et résoudre les problèmes de production.
  • Construire et maintenir l'infrastructure en tant que code, examiner les plans, gérer la configuration de l'environnement et traiter la dérive de l'infrastructure.
  • Travailler avec les développeurs pour évaluer les vulnérabilités, examiner les risques de sécurité et valider les correctifs.

Hands-on experience supporting production workloads in AWS

  • Familiarity with IAM, least privilege, secrets management, and encryption
  • Experience with Docker and Kubernetes, including troubleshooting deployments, services, health checks, and resource limits

Requirements

  • You hold relevant AWS, Kubernetes, Terraform, or security certifications
  • Experience using logs, metrics, dashboards, and alerts to investigate production problems
  • Worked with MySQL, PostgreSQL, Redis or Valkey, and Sidekiq
  • Experience with GitHub Actions, Argo CD, Helm, Karpenter, or KEDA
  • Understanding of common web application risks, including broken access control, injection, authentication weaknesses, and sensitive data exposure
  • A solid understanding of Linux, networking, DNS, HTTP, and TLS
  • Familiar with securing AI integrations, agent workloads, or MCP services

Supported services across multiple AWS regions

  • Clear communication skills and good judgment about when to work independently, request a review, or escalate an issue
  • Helped remediate penetration-test findings or contributed technical evidence to a SOC 2 audit
  • Ability to write automation in Python, Bash, Ruby, JavaScript, or another suitable language
  • Experience writing and maintaining Terraform modules and Terragrunt configuration, including reviewing plans and working with remote state
  • Working knowledge of SOC 2 controls and GDPR principles relevant to engineering, including access restrictions, data minimization, retention, and deletion
  • Around 3–5 years of experience in SRE, DevOps, platform engineering, cloud operations, or a related engineering role. Equivalent practical experience is welcome
  • Practical application security experience through vulnerability remediation, secure code review, threat modelling, or security tooling
  • Experience with Git, pull requests, CI/CD pipelines, and deployment workflows
  • Participated in backup restoration or disaster recovery exercises
  • Supported Ruby on Rails or Node.js applications in production

Preferred

  • Experience at a start up or scale up