Infrastructure Security Tester/Consultant

Endava Technology
Zagreb
Workplace: HybridFull timeFunction: Consulting & AdvisoryExperience: 8+ yearsSkills: ["Kubernetes","Containers","Terraform","Bicep","ARM","Helm","RBAC","CI/CD","IAM","Encryption","Monitoring","Logging","Security telemetry"]

Join Endava's security testing team as an Infrastructure Security Tester/Consultant to assess the resilience of cloud-native platforms and modern infrastructure environments. Perform infrastructure security assessments across cloud, Kubernetes, IaC, CI/CD; review IaC; collaborate with engineering, DevOps and architecture; provide risk assessments and remediation guidance; contribute to secure-by-design practices.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Endava Technology
Endava Technology
2 months ago

Infrastructure Security Tester/Consultant

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 20 hours agoStatus: Live

Job Summary

Join Endava's security testing team as an Infrastructure Security Tester/Consultant to assess the resilience of cloud-native platforms and modern infrastructure environments. Perform infrastructure security assessments across cloud, Kubernetes, IaC, CI/CD; review IaC; collaborate with engineering, DevOps and architecture; provide risk assessments and remediation guidance; contribute to secure-by-design practices.
Location: Zagreb
Workplace: Hybrid
Employment Type: Full time
Job Function: Consulting & Advisory
Seniority: Mid level

Key Responsibilities

  • •Perform infrastructure security assessments across cloud, containerized, and Kubernetes-based environments.
  • •Review Infrastructure as Code (Terraform, Bicep, ARM, Helm, Kubernetes manifests, or similar) to identify security risks and misconfigurations.
  • •Assess CI/CD pipelines, secrets management processes, encryption controls, logging, monitoring, and access management practices.
  • •Validate Kubernetes and container security controls, including workload isolation, RBAC, network policies, and runtime security.
  • •Retest remediated findings and verify the effectiveness of implemented controls.

Pay and Benefits

Perks:Hybrid WorkHealth InsuranceWellness StipendCommunity

Key Requirements

  • •+8 years of experience.
  • •Experience in infrastructure security testing within cloud-native environments.
  • •Strong understanding of Kubernetes, containers, cloud security, and Infrastructure as Code.
  • •Experience assessing CI/CD security, identity and access management, secrets management, and encryption controls.
  • •Familiarity with infrastructure monitoring, logging, and security telemetry.
Experience:8+ yearsInfrastructure securityCloud-nativeKubernetesDevOpsSRE
Skills:KubernetesContainersTerraformBicepARMHelmRBACCI/CDIAMEncryptionMonitoringLoggingSecurity telemetry
Languages:English
Tech Stack:KubernetesTerraformHelmRBACCI/CDTrivyKubescapeTfsecOPA/ConftestSnykCheckovTerrascanCloud security

Company Brief

Endava Technology
Provides IT services and digital engineering, delivering software development, automation, and consulting to enterprises across financial services, payments, telecommunications, and retail to accelerate digital transformation.
Industry: Consulting
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: London, United Kingdom
Founded: 2000
WebsiteLinkedIn