Junior Infrastructure Security Engineer

Shiji Group provides software solutions and services for the hospitality, food service, retail and entertainment industries, ranging from hotel management solutions, to food and beverage and retail systems, payment gateways, data management, online distribution and more.

Founded in 1998 as a network solutions provider for hotels, and later changed to a software provider for the whole consumer market, Shiji Group today comprises 5,000 employees in 80+ subsidiaries and brands, serving over 91,000 hotels, 200,000 restaurants and 600,000 retail outlets.

Shiji is committed to connecting the global business of hospitality. We provide an integrated suite of technological solutions that empower hotel, retail, food, and entertainment companies to better connect with their guests.

Daylight PMS is a distributed system that serves the hospitality industry. It is a solution that allows hotel employees or hotel managers to handle various activities such as managing reservations, payments and hotel services within the hotel or between hotels. The system consists of many domain-oriented microservices developed under a few cross-functional teams.

Job Description 

• You will be helping with designing and implementing security measures, to ensure that cloud environments are free from vulnerabilities and security risks. 
  

• Internal communication regarding identified findings. 
  

• No meetings with clients. 
  

Technologies: 

• Security related: Prowler, PMapper, Viz, Nmap, 
  

• Cloud related: AWS, Tencent, Aliyun, Oracle Cloud, WAF, Terraform, Python, 
  

• Linux operating system and services. 
  

You’ll be responsible for: 

• conducting basic security audits of the cloud environments, conducting solutions review & threat modelling, 
  

• creating reports from conducted security audits and solutions reviews, 
  

• helping with creating technical documentation of security requirements, 
  

• cooperation and substantive support in fixing security issues, 
  

• supporting SOC/NOC Team during security incidents, 
  

• helping with security tools implementation and maintenance, 
  

• helping with access management among various cloud environments. 
  

Requirements

Requirements: 

•basic understanding of cloud environments like 90% AWS, 10% multicloud (Tencent, AliYun, 

Oracle Cloud, Azure), 

•basic understanding of cloud related risks, 

•basic understanding of IaC concept, 

•linux working knowledge, 

•basic understanding of CI/CD security concepts, 

•knowledge of cloud security audit methodologies, 

•strong communication skills. 

Nice to have: 

•knowledge of Terraform, 

•knowledge of containers/Kubernetes, 

•cloud environment audits and IaC code review skills, 

•certificates related to cloud environments (e.g. AWS Certified Cloud Practitioner, AWS Certified Developer – Associate, Tencent Cloud Practitioner). 

We are looking for candidates based in the Silesia region (office in Katowice). Fully remote work is not an option, and unfortunately, applications from more distant locations will not be considered in the recruitment process.

Benefits