Job Description

:

Description-

The Senior DevSecOps Engineer would need to have at least 7+ years of experience. Your role will be working on leading the security strategy governing the application and cloud-based platform infrastructure.

You will work with other infrastructure, DevOps and application engineers to understand product and business needs, provide expertise around application and cloud service development, as well as define and own clear guardrails, alerts, and Security as Code (SaC) deployments to provide 24-7 protection from malicious traffic, vulnerabilities and other attack vectors.

Responsibilities-

Build relationships with developers, partners, and product owners to incorporate security principles into engineering design and deployments. Supervise testing and validation in application security controls across projects. Coordinate implementation of defensive practices and countermeasures across infrastructure and applications.

Draft and uphold CI-CD security strategy and practices in tandem with other technical team leads. Serve as a point of contact for security-based critical issues and remain tightly involved through resolution. Build services, automation, and tools to enable developers and engineers to easily apply security inter-workings into CI-CD pipelines.

Identify and communicate vulnerability results in a manner understood by technical and non-technical business units and gain support through influential messaging. Use vulnerability database sources to understand the weakness, probability and remediation options supplied by vendors as well as workarounds.

Join forces and provision security principles in architecture, infrastructure and code. Regularly research and learn new tactics, techniques and procedures (TTPs) in public and closed forums, and work with colleagues to assess risk and implement-validate controls as necessary through the CI-CD pipeline. Experience coordinating and performing vulnerability assessments through the use of automated and manual tools (Tenable, NMAP, etc).

Requirements

Skills-

Significant knowledge of security best practices for client-server product architectures, focusing predominantly on cloud-based server development.

Significant knowledge of AWS systems, including EC2, IAM, CloudWatch, CloudTrail, Config, Lambda, Security Groups, VPCs, WAF, Guard Duty, Inspector, etc.

Experience with cloud-based security management-IDS-IPS-SIEM tools, such as Splunk, Dome9, AlienVault, AlertLogic, Fortinet, Threat Stack, etc.

Programming or scripting experience with a popular modern language utilized by above tools (Java, Python, Ruby, etc.).

Experience extracting pertinent security data from SIEM solutions and AWS audit, logs, and reports - Life-long learner - always looking to stay up to date with latest attack vectors, vulnerabilities, remediation and protection paradigms, etc. Self-motivated, proactive, driven individual Desired Skills

Knowledge of one or more SSO methodologies (SAML, LDAP, MS AD)

Experience in performing security vulnerability assessments, good familiarity with regulations like PCI and SOX.

Strong interpersonal, oral, and written communication skills.

Ability to work in a fast-paced, rapidly changing, Agile, competitive environment - Ability to work independently and in group environments

Education-Certifications-

Bachelor\xe2\x80\x99s degree or higher in Computer Science, Engineering, or other Engineering or Technical discipline or equivalent relevant experience.

4+ years of experience with Security Best Practices, implementing enterprise-grade security solutions.

3+ years of experience with AWS development and management (AWS Associate certification or higher preferred).

2+ years of experience writing code or scripts in a modern programming or scripting language (Java, Python, Ruby, etc.).

One or more recognized security and cloud specific certifications, e.g., CCSP, SSCP, CISSP, CCSK Education.

Bachelor\xe2\x80\x99s degree in Computer Science, Electrical-Electronic Engineering, Information Technology or another related field or Equivalent.

Experience- Minimum 5+ years

Education:

Bachelors/Masters degree in CS or equivalent

Benefits

We offer a great work environment and friendly team culture. Competitive Pay and Benefits. These vacancies are urgent. Immediate Interviews. !

Benefits

T2S Software Solutions