Opa and Rego

2 weeks ago


Chandigarh Chandigarh, India Cywarden Inc. Full time

**Job Title**:OPA and Rego

**Company**: Cywarden

**Location**: Chandigarh

**About Cywarden**:Cywarden is a leading provider of cybersecurity solutions, specializing in protecting critical digital assets for businesses across various industries. We are committed to staying ahead of emerging threats and ensuring the security and integrity of our clients' systems and data.

As an Security Engineer, you will play a crucial role in ensuring the security of our APIs in a greenfield environment. You will be responsible for authoring security rules using Open Policy Agent (OPA) with Rego language via Wiz Infrastructure as Code (IaC), potentially integrating with Terraform Sentinel as well. Your expertise will be pivotal in maintaining a secure API landscape while facilitating relaxed deployment and testing practices.

**Responsibilities**:

- Rule Authoring: Develop and implement security rules using Open Policy Agent (OPA) with Rego language to enforce API security policies.
- Infrastructure as Code (IaC): Utilize Wiz IaC to integrate security policies seamlessly into the deployment process, ensuring consistency and scalability.
- Integration with Terraform Sentinel: Collaborate with the team to explore integration possibilities with Terraform Sentinel for enhanced security governance.
- Greenfield Environment Management: Design and implement security measures tailored for a greenfield environment, allowing for flexible deployment and testing.
- Continuous Monitoring and Improvement: Conduct regular assessments of API security posture, identify vulnerabilities, and recommend/implement enhancements to strengthen security controls.
- Collaboration: Work closely with cross-functional teams including developers, DevOps engineers, and security specialists to align security practices with business objectives and development lifecycles.
- Documentation and Training: Document security policies, procedures, and best practices. Provide training and guidance to team members on API security principles and methodologies.

**Qualification**:

- Bachelor’s degree in Computer Science, Information Technology, or related field (or equivalent practical experience).
- Proven experience in API security engineering roles, with a focus on designing and implementing security controls for APIs.
- In-depth understanding of Open Policy Agent (OPA) and experience with Rego language for policy authoring.
- Familiarity with Infrastructure as Code (IaC) concepts and experience with Wiz or similar IaC platforms.
- Knowledge of Terraform Sentinel or similar policy as code frameworks is desirable.
- Experience working in greenfield environments, with the ability to balance security requirements with agile deployment practices.
- Strong analytical and problem-solving skills, with the ability to assess complex security challenges and propose effective solutions.
- Excellent communication skills with the ability to articulate technical concepts to both technical and non-technical audiences.

**Why Join Cywarden?**
- Opportunity to work on cutting-edge cybersecurity projects and contribute to the protection of critical digital assets.
- Collaborative and dynamic work environment with opportunities for professional growth and development.
- Competitive salary commensurate with experience.
- Flexible work schedule with rotational shift (5 days week).
- Collaborative and inclusive work environment.

**How to Apply**:
*Speak with the employer*

**Job Types**: Full-time, Permanent

Pay: ₹1,000,000.00 - ₹5,000,000.00 per year

**Benefits**:

- Leave encashment
- Paid sick time
- Paid time off

Schedule:

- Monday to Friday
- Night shift
- US shift

Supplemental pay types:

- Performance bonus
- Quarterly bonus
- Yearly bonus

Ability to commute/relocate:

- Chandigarh, Chandigarh: Reliably commute or planning to relocate before starting work (preferred)

**Experience**:

- total work: 8 years (required)

**Language**:

- English (required)

Shift availability:

- Night Shift (preferred)

Work Location: In person