Security Automation Engineer

Sofia Stars is a fast-growing global service provider that guides high-growth businesses to success. Our range of tailored solutions includes R&D, Customer Support, Sales, KYC, Risk, and Anti-Fraud services. We make every connection shine with fresh tech and cultural understanding. We invite a DevSecOps Engineer to join our team. Responsibilities: ✔️ Develop direction, create a roadmap and improve the DevSecOps culture in the company.  ✔️ Help DevOps with secure Istio and ServiceMesh setup, Kubernetes (EKS) security setup.  ✔️ Interaction with DevOps, transfer of services for their support and training in security principles.  ✔️ Implementation of OPA and virtualisation configuration security analysers.  ✔️ Setting up CI/CD security and improving the security of solutions that use DevOps - Terraform, Ansible, etc. ✔️ Implementing Security Scanners in Pipelines.  ✔️ Automation of security processes.  Requirements: ✔️ Knowledge of the basic principles of DevOps approaches (CI /CD).  ✔️ Experience with Kubernetes or other orchestration tools.  ✔️ Experience with Ansible/Terraform/Chef configuration management systems, etc. ✔️ Experience in web server and database administration.  ✔️ Knowledge of the TCP/IP protocol stack and understanding of the OSI model.  ✔️ Understanding the principles of microservice application architecture.  ✔️ Experience with version control systems.  ✔️ Cloud experience (AWS, GCP) Security.  ✔️ Experience in infrastructure analysis for information security risks and their elimination / mitigation.  ✔️ Experience in automating management processes and access control.  ✔️ Experience in implementing Vault management systems and privileged user control systems.  ✔️ Experience with Security scanners and implementation of their pipelines.  ✔️ Understanding SSDLC (OSAMMv2) principles.  Our Excellent Benefits: * Up to 25 vacation days * 6 undocumented sick leaves * Medical insurance and dental coverage * Sport card 70% coverage (Multisport and/or CoolFit) * Food vouchers (102 EUR) * Appreciation gifts (birthday, wedding, newborn, etc.) * Office massages * Breakfast, lunch & snacks in the office * Education budget  * Monthly team events * Great office location Working Model: * This is an office-based position in Sofia, Bulgaria.   Grow fast, shine globally! By submitting your application, you agree to our Privacy Policy.

Sofia Stars is a fast-growing global service provider that guides high-growth businesses to success. Our range of tailored solutions includes R&D, Customer Support, Sales, KYC, Risk, and Anti-Fraud services. We make every connection shine with fresh tech and cultural understanding. We are looking for an Access Administrator who will be responsible for managing user access to company systems and data, ensuring security and compliance with information security requirements.   Duties and Responsibilities: Access Management:  * Manage user accounts, including creating, modifying, and deleting accounts.  * Ensure appropriate access levels are granted to employees based on their roles and job responsibilities.  * Conduct regular audits of user accounts to identify and eliminate excessive or outdated access rights.  * Implement and maintain access control policies to enhance security. Monitoring and Analysis: * Continuously monitor user access activities to systems and data.  * Analyze incidents related to access violations and respond promptly.  * Identify and analyze potential threats and vulnerabilities in access management systems. Incident Response:  * Respond to and investigate incidents related to access control violations.  * Escalate incidents to other teams as necessary.  * Assist in coordinating incident response efforts and provide documentation of incidents. Reporting, Documentation, and Continuous Improvement: * Maintain accurate and detailed records of access management actions and steps taken. * Prepare reports on incidents and access audits.  * Suggest improvements to access management processes. * Participate in post-incident reviews and propose enhancements.   Role Requirements: * 1-2 years of experience in access management, account administration, or information security roles. * Understanding of access management principles and best practices in information security. * Excellent written and verbal communication skills. Ability to clearly and effectively convey complex security concepts to employees at all levels.  * Strong analytical and problem-solving skills.  * Experience with identity and access management (IAM) systems and other security technologies.  * Skills in working with access monitoring and management tools such as Active Directory, LDAP, and similar systems.    Nice to Have: * A Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.  * Knowledge of regulatory requirements and standards such as ISO27001, ISO27701, PCI DSS, GDPR, and others.  * Experience in automating access management tasks and writing scripts to improve processes.  * Certifications in access management or information security, such as CISSP, CISM, or similar.  * Experience working with the Okta access management platform is a strong plus. Our Excellent Benefits: * Up to 25 vacation days * 6 undocumented sick leaves * Medical insurance and dental coverage * Sport card 70% coverage (Multisport and/or CoolFit) * Food vouchers (102 EUR) * Appreciation gifts (birthday, wedding, newborn, etc.) * Office massages * Breakfast, lunch & snacks in the office * Education budget  * Monthly team events * Great office location Working Model: * This is an office-based position in Sofia, Bulgaria.   Grow fast, shine globally! By submitting your application, you agree to our Privacy Policy.