ToYou | تويو

Site Reliability Engineer

• Refactor and document employee authentication and authorization systems (SSO, RBAC, MFA).
• Configure and maintain GitLab security tools and scanners (SAST, DAST, SCA).
• Integrate and automate AppSec vulnerability scanners across environments.
• Design and maintain secure inter-service communication and authorization using Istio and related security extensions.
• Tune and monitor AWS cloud infrastructure in line with CIS and industry best practices.
• Establish and promote DevSecOps processes, standards, and automation across the company.
• Conduct security awareness sessions and hands-on workshops for developers and DevOps engineers.
• Continuously improve the overall security posture through proactive analysis and collaboration with engineering teams.
• Be responsible for the security tools and services allocated to you.
• Investigate and resolve complex and high-priority security incidents.
• Create and maintain playbooks, policies, and custom rulesets to strengthen our security maturity.
• Contribute to the development of security standards and implement controls to enforce them.
• Help design and improve strategies to respond to and recover from security incidents and breaches.

Senior DevSecOps Engineer