Security Engineer

Security Engineer

At ANVA, we’re building the most advanced financial cloud platform for the insurance market. Working alongside DevOps, developers, and architects, you’ll ensure that “secure-by-default” becomes the standard. Your expertise makes our software robust, reliable, and future-proof. You’re the driving force behind our security approach:

This is what you will do

• Cloud Security (AWS): Implement and maintain security controls such as IAM, VPC segmentation, KMS, WAF, CloudTrail, GuardDuty, and more.
• Containers & Orchestration: Secure workloads on ECS/Fargate and Kubernetes (EKS) with image scanning, runtime monitoring, and least-privilege access.
• CI/CD Security: Integrate tools such as SonarQube, Snyk, and Semgrep into Jenkins and GitLab, set up security gates, and address vulnerabilities.
• Application Security: Conduct threat modeling and secure design reviews, perform testing using Burp Suite, and provide guidance on secure development practices.
• Detection & Response: Operationalize alerts and playbooks with CrowdStrike Falcon and Microsoft Sentinel.
• Identity & Access Management: Manage Auth0, OpenFGA, AWS SSO, and Entra ID in accordance with best practices.
• Risk & Compliance: Translate ISO 27001, NIST, and CIS requirements into technical controls and monitor their effectiveness.
• Collaboration: Actively share your knowledge with colleagues and external security partners through documentation and workshops.

You bring

• A bachelor's or master's degree in Computer Science, Cybersecurity, or similar.
• Extensive experience in security engineering.
• In-depth knowledge of cloud security (AWS/Azure), CI/CD, and SDLC.
• Experience with SAST/DAST, dependency scanning, and Kubernetes security.
• Knowledge of IAM tools such as Auth0, OpenFGA, AWS SSO, and Entra ID.
• Familiarity with frameworks such as CIS, NIST, CSA, ISO 27001/27002, and OWASP.
• Strong communication and organizational skills.
• Professional command of the English language.

For over 50 years ANVA has been developing software for the insurance industry. What began as an industry-led initiative has grown into an innovative fintech company used by more than 10,000 professionals every day. With our software, we help insurers, Managing General Agents advisors serve millions of customers more effectively and efficiently.