Mayflower is a technology company that alters the entertainment industry to a new level of perception and engagement.
We are building the future of live entertainment. We believe that by providing people with the best and high-quality live streaming experience in entertainment, we can tackle the world’s “problems” better, together!
We're looking for a DevSecOps specialist to join our team and collaborate on continuously evolving our security architecture. You'll work closely with engineering and operations to strengthen our end-to-end security posture—protecting infrastructure, applications, and data — while enabling fast, reliable delivery.
Job Responsibilities
- Responsible for the developing and maintaining the organization’s security architecture design to ensure the protection of IT systems, network infrastructure, and information assets.
- Security initiatives to assess and mitigate risks, ensuring alignment with business objectives and compliance with regulatory requirements.
- Collaborate with IT and business units to integrate security practices into the development and deployment of IT systems and applications.
- Conduct research on emerging security technologies and trends to enhance the organization’s security posture.
Requirements
- Proficiency in Ansible and Terraform for Infrastructure as Code (IaC).
- Solid knowledge of cloud security frameworks.
- Knowledge of threat intelligence platforms and techniques for monitoring and responding to potential security breaches.
- Proficiency in encryption technologies, PKI, and cryptographic protocols (SSL/TLS, IPSec).
- Understanding of network security, including firewalls, VPNs, IDS/IPS, and endpoint security solutions.
- Understanding of identity and access management (IAM) solutions, including SSO, MFA, and RBAC policies.
- Effective communication: Ability to convey complex security concepts in an accessible manner.
- Emotional intelligence (EQ): Fostering empathy and understanding in all interactions.
- Commitment to greatness: A results-driven mindset with a focus on excellence.
- Human-centricity: Ensuring solutions benefit both people and systems.
- Analytical thinking: Strong problem-solving and decision-making skills.
- Flexibility: Adaptable to changing priorities and challenges.
- Conflict management skills: Skilled in resolving disputes constructively and efficiently.
- Inter-dependence: A team player who thrives in collaborative environments.
Qualification that can be a plus
- SIEM, Cloudflare, k8s, ELK.
- Any IT / DevOps / Security certifications.
- Knowledge of modern DevSecOps practices.
- Expertise in scripting or programming languages such as Python, Go, Bash.
- Experience with security risk assessment frameworks, such as NIST, ISO 27001, or CIS.
- Hands-on experience with endpoint protection and configuration solutions (MDM, MAM).
- Hands-on experience with vulnerability scanning and penetration testing tools, such as Nessus, Qualys, or Metasploit.
- Knowledge of compliance standards (e.g., GDPR, HIPAA, PCI DSS) and their implications on IT security practices.
