Security Engineer

The Security Engineer is part of CARTA HOLDINGS’ ICT Division security team, working with roughly 20 subsidiaries whose products, development models and infrastructure differ. The role helps business and development teams assess security risks and adopt controls suited to each environment. Work covers risk assessment, control design and implementation, operations and ongoing improvement. Examples include AWS and Google Cloud reviews, infrastructure security advice, DevSecOps, security tools in CI/CD, vulnerability measures and incident support. Corporate tasks include identity and device management with Microsoft Entra ID and Intune, monitoring with Microsoft Defender, Sumo Logic log analysis and SOC alerts. The engineer also aligns risk-based measures with subsidiaries and develops reusable security practices. Applicants need experience designing and building infrastructure with AWS or Google Cloud, knowledge of networks, operating systems and cloud services, and experience using code in infrastructure work, such as IaC, scripts or CI/CD. Ongoing interest in and study of security is required. Dedicated security-role experience is not required.