Description:

Tala is a company focused on unleashing the economic power of the Global Majority by providing financial services to underserved populations.
They are looking for a Lead SecOps Engineer to design, implement, and maintain security solutions on AWS public cloud environments using a DevSecOps mindset.
The role involves driving the implementation of defense-in-depth infrastructure and application security solutions for the customer-facing SaaS platform.
Responsibilities include working on security configuration hardening, vulnerability management, detection, protection, and monitoring of security threats and intrusions in an automated fashion.
The position requires collaborating with Product, Engineering, and IT teams in a DevSecOps model on technologies like FWs, ACLs, WAFs, IAM roles, vulnerability management, threat detection, and Kubernetes Container Security solutions.
The Lead SecOps Engineer will also assist in incident response and triaging activities for security incidents and events.

Requirements:

B.S. Degree in Computer Science or related field or equivalent combination of professional development training and experience.
5-7 years of experience deploying and administering security infrastructure in GCP or AWS public cloud environments, using Infrastructure as Code.
Hands-on experience with at least one public Cloud platform (AWS or GCP) with advanced knowledge of securing IaaS platforms and services.
Prior experience working closely with Product, DevOps, and CloudOps' Site Reliability Engineers on shift-left strategies and CI/CD tools.
Security experience in a cloud-native environment in areas like authentication, access management, API security, Linux security, vulnerability scanning, threat detection, firewalls, WAF, encryption technologies, and container security.
Experience using a programming language such as Python for automation.
Security certifications such as AWS, GCP, CISSP, CEH, OSCP preferred.
Excellent verbal and written communication skills with the ability to document and explain technical details clearly.
Agility and willingness to deal with ambiguity, change, and high-pressure incidents.
Flexibility to contribute across programs and teams.
Strong teamwork skills, problem resolution, judgment, negotiating, and decision-making skills.
Knowledge of industry standards, vulnerability classifications, and attack vectors.
Experience working effectively with global teams in multiple time zones.

Opportunity to work for a company with a mission to provide financial services to underserved populations.
Chance to work on cutting-edge security solutions in a cloud-native environment.
Collaboration with global teams and exposure to diverse backgrounds and cultures.
Inclusion fosters innovation, and the company values diversity in its global team.
Competitive salary and benefits package.
Remote work opportunity with a remote-first approach.