Job Description

DevSecOps

Role Description


DevSecOps integrates security into the DevOps pipeline by embedding security practices into every phase of the software development lifecycle. This role involves performing security analysis, implementing defenses and countermeasures, and ensuring technology assets across applications, infrastructure, data centers, and data tiers are secure.

Responsibilities

• Security Integration : Work with developers to ensure security is built into systems and processes.
• Security Procedures : Design and develop security procedures and systems, including firewall management, SSL/IPSec, and security incident management.
• Risk Management : Identify software weaknesses and implement practices to mitigate vulnerabilities such as cross-site scripting and weak encryption.
• Audits and Testing : Prepare environments for security assessments, including external security audits and penetration testing.
• Automation : Implement industry-leading practices around security automation tools.

Key Skills

• Security Expertise : Experience with security assessments, vulnerability detection, and threat analysis.
• Technical Skills : Proficient in security tools, data protection measures (e.g., encryption, DLP), and user account management (e.g., SSO, SAML).
• Communication : Strong communication skills with the ability to convey complex technical concepts.
• Automation Tools : Experience with security automation tools and continuous integration tools such as GitlabCI, Jenkins, Hudson.

Domain Experience

• Experience with disaster recovery planning, business continuity, and security best practices.

Agile/Digital Experience

• Experience working with tech architects and development teams to improve overall security standards within Agile environments.

Individual Skills

• Tech Experience : 3+ years of proven tech experience with security and threat resolution.
• Testing and Integration : Proven experience across testing, integration, source code management, deployment, and containerization in Agile teams.

Mindsets and Behaviors

• Innovative : Constantly looks for better solutions to security problems and challenges existing practices.
• Self-Starter : Enjoys working in an environment that fosters entrepreneurial minds.
• Transparent : Believes in a culture of transparency and trust.
• Learning : Open to learning new ideas beyond current knowledge scope.