inDrive is an international technological platform for transport and personal services. We are one of the top 2 mobile travel booking services in the world with over 200 million installs, over 2 billion trips, 888+ cities in 48+ countries.
inDrive is a product used by tens of millions of people every month. They make urban or intercity trips, order cargo transportation or courier delivery, look for work and call handymen to provide household services.
inDrive employs about 3,000 employees, of which 600+ are developers, divided into 50+ cross-functional teams.

Tasks and duties are to:

• Conducting periodic security audits of various infrastructure components, including cloud and baremetal environments, CI/CD components, authentication and authorization systems, logging infrastructure, and more
• Supporting external security audits and penetration tests and manage the remediation process for identified problems and misconfigurations
• Participation in the development of architectural solutions and services related to server infrastructure and provide security expertise in designing and implementing infrastructure services
• Developing of processes for scanning the perimeter and internal infrastructure for vulnerabilities using commercial and open source tools, support the vulnerability remediation process and assist infrastructure and development teams
• Maintaining and development of Information Security department s infrastructure, utilizing the company s technology stack, primarily AWS and Kubernetes, implement best practices in security and DevOps within the department s infrastructure

You will be a good fit for our team if:

• Requirements Minimum of 3 years of practical experience in infrastructure security
• Experience in implementing vulnerability scanning processes for external perimeters and internal infrastructures using both commercial and open source tools
• Proficient in IaC tools such as Terraform, Terragrunt and Ansible, experience in developing custom playbooks and manifests
• Experience in developing CICD pipelines using tools like GitHub Actions or GitLab CI, strong understanding of pipeline security and automation
• Deep understanding of Kubernetes components and operations, experience with security aspects of Kubernetes, including RBAC, Policy Engines, Network Policies, Security Contexts, and image security processes
• Strong knowledge of AWS services and cloud security best practices, experience in securing cloud based infrastructures
• Proficiency in scripting languages (e.g., Python, Bash, Golang) for automation purposes, experience developing automation scripts to enhance security operations
• Solid understanding of network security concepts and tools, experience in implementing network security measures
• Excellent verbal and written communication skills, ability to convey complex security concepts to technical and non-technical stakeholders
• Preferred Qualifications and Professional certifications such as OSCP, CKA, CKS, AWS Solutions Architect, AWS Certified Security, RHCE, RHCA, LFCS, HTB CPTS, or equivalents
• Practical experience working as a DevOps engineer, ability to manage infrastructure on AWS and Kubernetes platforms
• Experience with secret management systems like HashiCorp Vault, deep understanding of principles and best practices in secret management
• Experience in implementing monitoring systems for infrastructure, proficiency in collecting metrics and configuring alerts for availability issues
• Experience working with SIEM systems, ability to develop detection rules for Linux, AWS, GCP, and Kubernetes environments
• Experience in architectural reviews of infrastructure services, ability to enhance infrastructure designs from a security perspective
• Contributions to open source security projects and infrastructure projects
• Familiarity with compliance standards like ISO 27001, PCI DSS, experience implementing controls to meet regulatory and compliance requirements

We offer:

• A flexible work schedule, official employment compliant with the Labor Code. After one year of employment, workers are eligible for the Office Without Borders program, which allows them to move temporarily to and work from any location in the world;
• Relocation to Cyprus at the company's expense, relocation package;
• Regular external and internal training. Employees have the opportunity to attend professional conferences as participants or speakers;
• Partially or fully paid supplementary training courses;
• Monthly “Fun Day” activities — corporate events in various formats, ranging from standup nights to hikes in the mountains;
• Something nice on important dates —company gifts to mark weddings, the birth of a child, and birthdays.