TechOps & Security Egnieer

As a TechOps & Security Engineer at Improbable, your key responsibilities include overseeing the daily operations of security platforms, implementing relevant security controls, conducting security audits in accordance with ISO27001 standards, and offering third-line support for internal applications. Additionally, you'll be involved in incident response, vulnerability assessments, and helping to develop security policies to meet our evolving business needs.

To apply for the TechOps & Security Engineer position at Improbable, you'll need familiarity with programming languages like Go, Python, PowerShell, and Bash. Experience with cloud platforms, particularly Google Cloud Platform and Microsoft Azure, is crucial. Having hands-on experience with security tools such as Intune, Puppet, and general SaaS integrations will greatly benefit you as well.

Improbable promotes a culture of continuous learning and sharing knowledge. In the TechOps & Security Engineer role, you’ll not only enhance your own skills but also have opportunities to mentor and support the development of junior team members. This proactive momentum is encouraged within our innovative environment, enabling everyone to grow together.

In your TechOps & Security Engineer role at Improbable, you will utilize various tools such as Terraform for Infrastructure as Code management, Kubernetes for deployments, and security monitoring tools. Familiarity with collaboration platforms like Slack, and project management tools such as JIRA will also be valuable as you collaborate with multiple teams across the organization.

At Improbable, you can expect a dynamic and flexible work environment. With our hybrid working model, you can work from our London office or remotely 1-2 times a week. We focus on offering flexibility and autonomy, ensuring a balance that works for both your personal needs and our team goals.

When approaching incident response and threat analysis, it's vital to stay calm and organized, as you will often be dealing with high-pressure situations. Begin by assessing the incident's scope, collecting relevant data, and determining its impact on the system. Communicate effectively with all stakeholders involved, while documenting each step of your process. Share how you've used threat intelligence to guide your analyses and decisions in past experiences.

Absolutely! When discussing your experience with ISO27001 audits, highlight your understanding of the standard's requirements, your role in planning and conducting audits, and how you identified potential compliance gaps. Provide examples of how you collaborated with other teams to address these gaps, and how you contributed to maintaining or improving security controls based on audit findings.

For effective vulnerability assessments, I rely on structured methodologies such as risk scoring and prioritization frameworks. Additionally, I utilize automated scanning tools coupled with manual testing as necessary. I regularly collaborate with development and operational teams to ensure that findings are addressed promptly, and I communicate the potential risks effectively to non-technical stakeholders.

Staying informed about the latest security threats is critical. I regularly follow industry-leading blogs, attend webinars, and participate in security forums and conferences. I also leverage online courses to continuously upgrade my knowledge and skills. Sharing insights with my team and encouraging discussions about new threats helps ensure that everyone stays informed and vigilant.

Collaborating with development teams is essential for integrating security into the development lifecycle. Share a specific instance where you communicated security requirements early in the development phase. Detail how you worked together to implement and test security measures, and how this collaboration ultimately resulted in a more secure product launch.

In my previous roles, I have worked extensively with cloud security platforms like Google Cloud and Microsoft Azure. Discuss how you've implemented security practices within these environments, such as securing API keys, managing identity and access, and utilizing native security features. Highlight specific instances where you improved cloud security and reduced vulnerability exposure.

Managing multiple tasks in a tech operations role requires strong organizational skills and prioritization tactics. I typically use project management tools to track tasks and deadlines, categorize responsibilities based on urgency and importance, and allocate dedicated time slots for in-depth focus. Additionally, I maintain regular communications with my team to ensure alignment on priorities.

I have hands-on experience with various DevOps tools and processes, particularly focusing on automation and CI/CD practices. Share details of tools like Jenkins, Terraform, or Kubernetes you've used, your role in managing deployments, and how you've contributed to improving the overall efficiency of development workflows.

Ensuring compliance with security policies requires clear communication and education. Discuss how you proactively share policy updates and provide training sessions to ensure team members understand their responsibilities. Regularly reviewing adherence through checks and balances also helps foster a culture of compliance and accountability within the team.

Expressing your interest in Improbable should highlight the alignment between your skills and their innovative mission. Talk about how you admire their commitment to developing virtual experiences and how you'd love to contribute to shaping the future of the metaverse through your expertise in security and tech operations. Showcase your enthusiasm for being part of a company that's breaking new ground in technology.