Our Client who is focused on implementing tailored digital transformation solutions that match each business needs and ambitions by supporting them to achieve lower operational costs, improved productivity, standardized processes, data security, competitive market offerings and high customer engagement are looking to hire a DevSecops Engineer .
The DevSecOps Engineer will carry out these functions :
Implement secure practices i. e Vulnerability Scanning, Certificate Management,
Password Policy Management, Data Analysis of security monitoring outputs, defense in- depth and monitoring and event response tool sets to handle growing threats and other
security and compliance. Responsible for executing and implementing Security Development Lifecycle (SDLC) for products and services.
Implement encryption, privilege management, logging, input validation, secure storage design and secure data transfer across various platforms.
Managing cryptography and encryption of data in the cloud. Implement security through code development and infrastructure code reviews, establishing security ecosystems utilizing APIs and event driven security response.
Develop positive partnerships and work closely with other stakeholders to align and execute infrastructure changes in a secure manner to support Customer’s tools, apps, and processes.
Work closely with the Engineering team to provide guidance on security weaknesses in the Product development and Customer environment.
Provide security requirements for projects and initiatives.
Conduct security risk assessments, planning, policy reviews, gap analysis, status / progress reports and action plans. Implement security automation via a DevSec pipeline.
Carry out vulnerability management, automation and remediation Performing threat simulations and penetration tests to identify and detect possible risks.
Hands-on experience using securing container technologies. Securing Container and Kubernetes images at rest, build, and runtime.
Work closely within the DevOps, Solution Architect, Software Engineers and DBAs to refine and enforce best security practices.
Bachelor in Computer Science or Computing Systems or equivalent degree. Bachelor's degree in Computer Science, Electrical / Electronic Engineering, Information Technology, or another related field.
Minimum of 3-5 years of prior relevant experience Certifications / Training - OSCP, CISSP, CISA, CISM, CEH, CCNA, CCNP Other Requirements : Sense of ownership and pride in your performance and its impact on company’s success.
Critical thinker and problem-solving skills. Team player. Good time-management skills. Interpersonal and communication skills.