We are looking for a Security Engineer with a Software Engineering background to join our Security Team at Skroutz. The Security Team is part of our Platform division and aims to assist the development teams produce secure code and help the rest of the Platform division secure our infrastructure.
Examples of work you might undertake
Integrate security tools (e.g. dynamic or static analysis tools) in the development process
Conduct penetration tests for internal- and external-facing applications
Harden the basic OS image we use on our servers
Identify threats and provide guidance on hardening a new service
Develop and maintain internal tools around security (e.g. automated security update rollout, infrastructure security intelligence gathering)
Educate developer teams around security concepts
Assess third-party software for inclusion in our infrastructure
What skills and experience you will need
At least 2 years of working experience as a Security Engineer in a professional setting
A solid CS background, accompanied by a genuine interest in security
Good communication and interpersonal skills
Ability to inspire and motivate a team to achieve individual and company goals
Good working knowledge of at least one programming language
Familiarity with Llinux from a security viewpoint
We will appreciate if you have
Worked as DevSecOps in a professional setting
Prior experience with penetration testing (whitebox or blackbox)
Experience with mobile application security
Contributed to open-source projects; sharing contributions or personal projects will help us in the evaluation process.
What’s it like to work at Skroutz?
Skroutz is the leading eCommerce platform in Greece. At Skroutz we are committed to using modern software development to build top-notch services and experiences.
Our company operates , a product discovery and price comparison engine that is evolving into a marketplace, as well as , our fast-growing venture for online food delivery.
Our engineering values
Know your Tech. Develop and master your craft, sharpen your tools. Be of your work.
Release early & Iterate. Deliver prototypes and start gathering important feedback early on. Use that feedback to guide you.
Don't be afraid to compromise, make sure to come back & tidy things up.
Be a team player. Offer your help, listen and seek to understand. Step up & take initiatives.
Don't over anything. Don't over-engineer, over-analyze, over-regulate, you get it.
Enjoy your work. Celebrate success.
Technologies we use
Our main product is a Ruby on Rails application, running on an internally-managed infrastructure. Our infrastructure consists of 500 physical and virtual machines running Debian GNU / Linux and spans 3 physical locations.
Core products and technologies we use include :
KVM / Ganeti
MariaDB, MongoDB, Redis, Elasticsearch
Puppet for server automation
Ansible for network switch automation
Docker / LXC
What we offer
A modern workplace environment
Solid career paths
Private medical plan
Breakfast, subsidized lunch (optional), soft drinks, snacks, fruits
Equipment of your choice (Macbook, Linux Debian)
Access to technical books, online courses, and relevant resources
Extra paid time off
Flexible remote working