Computer and Network Security👥 11 employees📍 San Francisco, CA, USEst. 2021
Mondoo is a powerful security, compliance, and asset inventory tool that helps businesses identify vulnerabilities, track lost assets, and ensure policy compliance across their entire infrastructure.…
📋 Job Overview
Mondoo is creating a new way that helps companies keep their users and data safe from hackers around the world. We believe that a great user experience and visual design will help our users to love and enjoy our product and make it easier to take action against attackers.
🏢 About Mondoo
We are a company focused on enhancing cloud security through innovative solutions. Our platform helps organizations assess, scope, prioritize, triage, and remediate security findings effectively.
🎯 The Role
You will have a direct impact on the Mondoo Platform including our policy engine, resources, scale, and multi-region functionality. You will be helping teams to assess, scope, prioritize, triage and remediate security findings.
✅ Key Responsibilities
Build, manage, and optimize cloud infrastructure using Infrastructure as Code (IaC) tools like Terraform and CloudFormation.
Automate system configurations using tools like Ansible, Puppet, or Chef.
Collaborate with teams to ensure seamless integration of infrastructure with CI/CD pipelines.
Assist in translating high-level security requirements into practical policy as code implementation within cloud and on-premises environments.
Review vulnerability reports submitted by external users
Participate in gathering evidence for our audits
Support the implementation and scaling of automated security controls in Kubernetes, cloud environments (AWS, Azure, GCP), and operating systems.
Stay updated on infrastructure management and automation trends, ensuring a robust and scalable system foundation
📌 Required Qualifications
Strong hands-on experience with IaC tools like Terraform or CloudFormation.
Proficiency in configuration management tools such as Ansible, Puppet, or Chef.
Solid understanding of at least one major cloud platform (AWS, Azure, or GCP) and its core services.
Experience working with container technologies like Docker and orchestration tools like Kubernetes.
Comfortable scripting in at least one language (e.g., Python, Bash, or similar).
Knowledge of networking basics (TCP/IP, DNS, etc.).
Experience with version control systems (e.g., Git).
Strong problem-solving and analytical skills.
Willingness to learn and grow into a role focused on security policies and automation.
Excellent communication skills with the ability to work effectively in a collaborative team environment.
Able to handle one-off requests while still maintaining the rest of the work
⭐ Desirable Experience
Familiarity with security tools and concepts such as policy as code frameworks (Open Policy Agent, Sentinel).
Knowledge of compliance standards (e.g., CIS, SOC 2, ISO 27001).
Previous exposure to cloud-native security tools and services.
Relevant certifications in cloud platforms (e.g., AWS, Azure, GCP).
A keen interest in learning about security best practices, frameworks, and tools.
