Indico Data

Security Engineer

• Improve Indico’s technical security posture across AWS, Kubernetes, CI/CD, product security, internal systems, and incident response.
• Partner with the CISO and CTO to turn security priorities into practical technical controls, standards, reviews, and operating processes.
• Review Engineering work against security standards, with authority to request changes where needed.
• Partner with Engineering on AWS security controls, including IAM, networking, account structure, logging, encryption, key management, backups, production access, and customer-dedicated environments.
• Review and improve Kubernetes and container security controls, including workload identity, RBAC, network boundaries, image security, runtime monitoring, and deployment patterns.
• Define and improve secure CI/CD patterns, including GitHub permissions, branch protections, privileged workflows, secrets handling, release controls, and deployment access.
• Define and oversee processes for vulnerability management, committed-secret response, secure development, incident response, and access control while Engineering, Platform, IT/Ops, and system owners operate them in their domains.
• Provide product security support, including secure design review, threat modeling for sensitive features, scanner tuning, and high-risk change review.
• Improve detection and response coverage across tools such as CloudTrail, GuardDuty, CrowdStrike, SIEM/logging platforms, vulnerability scanners, and secrets detection.
• Own day-to-day security monitoring and response operations, including alert routing, triage expectations, escalation paths, and detection improvements.
• Coordinate technical containment during security incidents across Engineering, Platform, IT/Ops, and leadership.
• Maintain incident response runbooks and partner with the CISO on severity, executive escalation, counsel/compliance coordination, and customer communication strategy.
• Create practical security guidance, standards, procedures, and runbooks for security-sensitive work such as production access, secrets handling, vulnerability remediation, incident response, customer data handling, and secure engineering.
• Maintain reusable technical security documentation, standard responses, and evidence packages for customer due diligence and compliance support.
• Evaluate security tools and vendors with a focus on technical coverage, operational fit, and reducing manual work.
• Build or sponsor lightweight automation, checks, dashboards, and workflows that make security controls repeatable.

Senior Cybersecurity Engineer