Security Observability Engineer

About the role

NCS is looking for an engineer to own the end-to-end evaluation, design and implementation of security and observability solutions for a container-based private cloud platform. The role covers the full lifecycle, from architectural research and tool selection through production deployment and operations, across unified telemetry, security detection, vulnerability management, supply chain security and automated incident response. You will work with platform engineering, security operations and SRE teams to deliver a unified telemetry-first architecture.

Key responsibilities

• Evaluate candidate tools against licence compliance, community governance, vendor independence and technical fitness, run proof-of-concept exercises and track governance posture
• Design unified telemetry pipelines, security detection workflows, vulnerability aggregation and supply chain security controls, and automated remediation workflows
• Deploy and operate the observability stack, security monitoring stack and CI pipeline security scanning, including image registry security, identity and secrets management, and incident management tooling
• Maintain detection rules, alerting rules and automation playbooks, and define operational runbooks and SLOs
• Work with legal/compliance on licence reviews and maintain contingency plans for vendor dependencies

Required profile

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems or equivalent practical experience
• 5+ years in platform engineering, SRE or security engineering roles
• Experience with at least three of the listed technologies, including Kubernetes or equivalent container orchestration
• Open-source contributions, and experience in government or regulated environments with strict vendor-independence requirements are advantages

Required skills

• Telemetry collection, columnar databases, metrics scraping and alerting, SIEM operations, search-based log analytics
• Container security scanning, SBOM, image signing, provenance attestation, SOAR or automation platforms
• Graph databases, vulnerability management, identity providers, secrets management, GitOps workflows
• Linux systems fundamentals, detection rule writing, and static/dynamic application security testing