Infrastructure Engineer

Quarkslab is a French company specializing in information security R&D, consulting and software development. Our expertise is in combining offensive and defensive security to help organizations adopt a new security posture: Force the attackers, not the defender, to adapt constantly. Through our consulting services as well as our software we provide tailored solutions to organizations, helping them to protect their assets, sensitive data, and users against increasingly sophisticated attacks.

Quarkslab is an avid and active user of, and contributor to, Open Source Software and develops and maintains state-of-the-art security tools such as LIEF , QBDI, Triton, Irma, and several other projects.

We develop two commercial software products: QFlow, a platform to automate and orchestrate security analysis of files at scale, and QShield, advanced code and data protection software to disrupt code lifting, reverse engineering and tampering attacks.

At Quarkslab, almost all of the infrastructure is managed (and hosted) internally. We operate our own (modest) datacenters up to applications, which allows us to ensure total control of our data.

The information system itself is growing, both in terms of the number of physical sites, machines, VMs, services... Our internal infrastructure has been put to the test in order to quickly adapt to the new and growing needs of the development teams: continuous integration servers, test servers, code hosting, Docker image servers, and much more, all with strong security constraints. In 2021, we have undertaken a major infrastructure upgrade to support all these challenges, with brand new storage servers, hypervisors & computing power.

Today, the different teams are asking for more advanced functionalities, such as automated deployment of virtual machines, provision of Kubernetes clusters to deploy containers or even more varied and substantial data storage needs.

Exceptionally, we are also moving some services to cloud providers when we are unable to provide an equivalent service in-house.

Technologies used are mainly open-source. The emphasis is on stability, maintainability, automation and security.
Some examples:

• OS: Debian / Ubuntu
• Virtualization stack: oVirt / KVM / TrueNAS
• Backups: Borg
• Containers: Docker / Kubernetes
• Monitoring: Prometheus / Grafana / LibreNMS
• Logging: ELK
• Automation: Ansible
• Network: JuneOS / EdgeOS
• Repositories: GitLab
• DCIM / IPAM: NetBox

Why work at Quarkslab?
Work with an amazing team, eager to learn and play with new approaches and technologies, mixing various skills (security, compilation, program analysis, reverse engineering, software engineering). International environment with offices in Paris and Buenos Aires (team croissants vs. team asado), representations in Tokyo and Singapore.

• Attend conferences in your field, learn from many internal events (weekly conference, trainings, research activities).
• Contribute and support Open Source Software: Our own tools and other people’s projects.
• Flexible work hours, work from home.
• Premium health insurance.

Our recruitment process:

1. Call with our talent acquisition manager.
2. Video call with the Hiring Manager.
3. Do a short challenge
4. Interview with Core Infra team, Security Office, QLab Leader & Pentest Manager at Quarkslab’s Office (or remote).
5. HR debrief and job offer.

Quarkslab is proud to be an equal opportunity workplace employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability or gender identity. If you have a disability or special need that requires accommodation, please let us know and we will be happy to accommodate.

List of desirable skills and knowledge:

• Knowledge with installation and administration of Linux servers (preferably Debian based), from low level to current applications and services, including network and security
• Good experience with virtualization technologies (e.g. libvirt, QEMU/KVM) and containerization (Docker)
• Knowledge of a scripting language (Python or Bash)
• Knowledge of a configuration management tool (preferably Ansible)
• Knowledge of git
• Understanding of the operation of common local computer services and networks: VLAN, DHCP, DNS, LDAP, etc.
• Ability to read and discuss in English
• Interest in understanding and fully solving the problems encountered so that they do not recur
• But above all, the desire to progress both personally and as a team!

It would also be nice if you have:

• Experience in physical server management (hardware, racking, IPMI, etc.)
• Experience in physical and virtual network management (cabling, DCIM/IPAM, etc.)
• Experience in using and managing Kubernetes clusters
• Experience in managing Office 365/Azure tenants
• Strong interest in computer security