DevSecOps Engineer

Sobre a vaga

As a DevSecOps Engineer, you will be part of the Governance & Architecture team within the Cloud & DevOps Services department. You are instrumental in enabling and enhancing our security posture throughout our software delivery lifecycle. Your proficiency in DevOps and secure application development practices will make you a crucial link between development and operations teams.

O que vais fazer

• Contribute to and enhance a complete stack of solutions for Cloud Security & DevSecOps management from a people, process, and technology standpoint
• Develop and implement security controls that are aligned with the organization's security policies and procedures throughout our software delivery lifecycle
• Automate the implementation and testing of these controls
• Monitor their effectiveness and make necessary adjustments
• Investigate and resolve security incidents that are related to security controls
• Provide practical guidance to engineering and project teams to support the implementation of security controls, guidelines, and best practices
• Be a driving element and enable greater cooperation between product teams, cybersecurity teams, and compliance functions, helping quantify the risk and define relevant control objectives and activities to secure cloud workloads
• Contribute to the cloud and DevOps security governance
• Be autonomous and proactive; Able to understand functional and technical requirements, identify gaps, and suggest improvements

O que é pedido

• Previous experience in an SSDLC context, with a proven track record in developing and implementing effective security solutions and managing security challenges
• Familiarity with security controls and frameworks
• Knowledge of the SDLC and how to integrate security controls into the SDLC
• Knowledge of security risk assessment frameworks like OWASP top 10 (Web Applications, API)
• Experience with automation tools , ci/cd (gitlab ci, Jenkins, awx…) and scripting languages (Python/Go mainly) will be key to understanding the context in which the controls must integrate and automating the implementation and testing of security controls themselves
• Knowledge of cloud (AWS, Ali Baba, and GCP, ideally) and Kubernetes security is essential, as these are the foundations of our technology stack
• Strong problem-solving skills
• Effective communication skills
• A passion for continuous learning and keeping up with the latest security trends and technologies
• Fluent in English

Valorizado

• French is a plus

Resumo organizado por IA a partir do anúncio original. Confirma os detalhes no site da empresa.