Infrastructure Security Tester/Consultant

Endava Technology
Sofia
Workplace: HybridFull timeFunction: Consulting & AdvisoryExperience: 8+ yearsSkills: ["Kubernetes","Containers","Terraform","Bicep","ARM","Helm","Kubernetes manifests","RBAC","Network policies","Runtime security","CI/CD","Secrets management","Encryption","Logging","Monitoring","Istio","Kubernetes posture","Kubescape","Tfsec","Checkov"]

Infrastructure Security Tester/Consultant to assess resilience of cloud-native platforms and modern infrastructure environments. You will conduct security assessments across cloud platforms, Kubernetes, containers, IaC, CI/CD pipelines, IAM, secrets management, encryption, and monitoring controls, partnering with engineering, DevOps, and architecture teams to drive secure-by-design practices.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Endava Technology
Endava Technology
2 months ago

Infrastructure Security Tester/Consultant

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 10 hours agoStatus: Live

Job Summary

Infrastructure Security Tester/Consultant to assess resilience of cloud-native platforms and modern infrastructure environments. You will conduct security assessments across cloud platforms, Kubernetes, containers, IaC, CI/CD pipelines, IAM, secrets management, encryption, and monitoring controls, partnering with engineering, DevOps, and architecture teams to drive secure-by-design practices.
Location: Sofia
Workplace: Hybrid
Employment Type: Full time
Job Function: Consulting & Advisory
Seniority: Mid level

Key Responsibilities

  • •Perform infrastructure security assessments across cloud, containerized, and Kubernetes-based environments.
  • •Review Infrastructure as Code (Terraform, Bicep, ARM, Helm, Kubernetes manifests, or similar) to identify security risks and misconfigurations.
  • •Assess CI/CD pipelines, secrets management processes, encryption controls, logging, monitoring, and access management practices.
  • •Validate Kubernetes and container security controls, including workload isolation, RBAC, network policies, and runtime security.
  • •Retest remediated findings and verify the effectiveness of implemented controls.

Pay and Benefits

Perks:Hybrid WorkWellness Stipend

Key Requirements

  • •+8 years of experience
  • •Experience in infrastructure security testing within cloud-native environments
  • •Strong understanding of Kubernetes, containers, cloud security, and Infrastructure as Code
  • •Experience assessing CI/CD security, identity and access management, secrets management, and encryption controls
  • •Familiarity with infrastructure monitoring, logging, and security telemetry
Experience:8+ yearsInfrastructure securityCloudKubernetesDevOpsSRE
Skills:KubernetesContainersTerraformBicepARMHelmKubernetes manifestsRBACNetwork policiesRuntime securityCI/CDSecrets managementEncryptionLoggingMonitoringIstioKubernetes postureKubescapeTfsecCheckov
Languages:English
Tech Stack:KubernetesTerraformHelmCI/CDRBACIstioTrivyKubescapeSnykCheckovTerrascanTfsecOPA/Conftest

Company Brief

Endava Technology
Provides IT services and digital engineering, delivering software development, automation, and consulting to enterprises across financial services, payments, telecommunications, and retail to accelerate digital transformation.
Industry: Consulting
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: London, United Kingdom
Founded: 2000
WebsiteLinkedIn