Senior Manager
Overview:
We're looking for a Senior Infrastructure Security Manager to lead the protection of Maya's cloud and on-premise infrastructure across both production and corporate environments. You will drive infrastructure security strategy, oversee security tools and identity access management practices, and partner with technology teams to build security into every stage of the development lifecycle.
What you will be doing:
• Implement and optimize security tools and their corresponding rulesets.
• Partner with Technology and Product teams to embed infrastructure security early in the design and development process.
• Conduct threat modeling and security design reviews for high-risk product features.
• Provide guidance and best practices for securing the company's infrastructure components.
• Lead, mentor, and develop Infrastructure Security team members.
• Participate in cross-functional security initiatives and incident response simulations when required.
• Enforce strong governance over product and service security.
• Continuously improve proactive security measures to strengthen trust and protection.
• Foster a security-by-design culture and mentor engineers on security best practices.
• Ensure a scalable, efficient, and well-managed security framework.
Displayed Skill Mastery:
• Experience in Infrastructure Security or related Information Security domains.
• Advanced knowledge of cloud security.
• Proficiency with security technologies such as endpoint security tools, CNAPP, DLP, SIEM, vulnerability management tools, and related platforms.
• Deep understanding of modern infrastructure threats and vulnerabilities.
• Experience with threat modeling frameworks such as STRIDE and PASTA, and secure design patterns.
• Strong communication, collaboration, and mentorship skills.
What we are looking for:
• Bachelor's degree in Information Technology, Computer Science, or a related field.
• Practical experience in Information Security Architecture.
• Proficiency with security tools and cloud environments.
• Strong networking knowledge and skills.
• Experience with cloud security and compliance frameworks such as AWS, PCI DSS, and ISO 27001.
• Understanding of container security, Kubernetes, and microservices security.
• Familiarity with code review practices, threat modeling, and product-level risk analysis.