To help us build secure and functional systems that improve customer experience we are now looking for an experienced DevSecOps Engineer.

You will be responsible for Identifying production issues, Vulnerability Scanning, Certificate Management, Password Policy Management, Data Analysis of security monitoring outputs, coordination of Remediation Patching, and other daily Application, Security and Compliance efforts. Additionally, you will assist in developing an automated framework for robust deployment tools and processes, leveraging various scripting languages and open source solutions.

Objectives of this Role

  • Building, configuring and securing development tools and cloud infrastructure
  • Understanding the needs of stakeholders and conveying this to developers
  • Automate, secure and improve development and release processes
  • Testing and examining code written and analyzing results
  • Ensuring that systems are safe and secure against cybersecurity threats
  • Identifying technical problems and developing software updates and fixes
  • Working with software developers and software engineers to ensure that development follows established processes and works as intended

Daily and Monthly Responsibilities

  • Deploy security updates, patches and fixes
  • Provide Level 2 technical support
  • Build tools to secure the environment, reduce occurrences of errors and improve customer experience
  • Design, implement, support and evaluate security-focused tools, vulnerabilities management tools and services.
  • Investigate, resolve and perform root cause analysis & preventive actions for production issues
  • Design procedures, automations for troubleshooting and maintenance

Skills and Qualifications

  • 3+ years experience in relevant positions
  • BSc in Computer Science, Engineering or relevant field
  • Experience as a DevSecOps Engineer or similar software engineering role
  • Experience with devops tools including CICD, git and git workflows
  • Experience with TCP/IP, HTTP, API Security, Container Security, Cloud Security configuration and management tools
  • Comprehension in the security areas of Key Management Systems, Certificate Management, Encryption, Penetration Testing, Vulnerability Scanning, Security and Monitoring tools, etc.
  • Knowledge of PCI-DSS, SOX, GDPR, and CCPA Standards and Policies
  • Experience with security automation and machine learning.
  • Knowledge in node.js, Java programing, Bash, Python scripting
  • Scripting YAML, JSON, SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing)
  • Working knowledge of databases and SQL
  • Problem-solving attitude
  • Excellent communication skills and collaborative team spirit