Salary
WHAT WE ARE LOOKING FOR: We are looking for a DevSecOps Engineer that is passionate about infrastructure security. Not simply to achieve audit compliance. Utilizing your deep infrastructure knowledge, collaborate with operations, development, and infosec team members contribute in advancing security-focused best practices and security automation. The right candidate thrives on continuous improvement and is relentless in actively identifying and remediating security issues. YOUR DAY TO DAY Function as the lead internal security expert to provides technical guidance for all engineering teams Collaborate with architects, InfoSec and development teams to ensure a Security-by-Design philosophy Drives implementation of the infrastructure security architecture, strategy and implementation Design and maintain security automation using modern CICD and GitOps processes and tools Collaborates with infosec and engineering teams to review audit results, security scan results, and vulnerability assessments to determine appropriate remediation plans Serve as an active member of the incident response team by acting as a technical consultant on information security incident investigations and forensic technical analysis WHY YOU ARE THE PERFEC FIT Bachelor’s degree in Computer Science, Computer Engineering, equivalent At least 3 years experience in a development capacity with Python, Java, or Go At least 3 years of experience in DevOps capacity with keen understanding of CICD practices Strong AWS and Linux system administration skills Proven experience in a SaaS environment Experience with container orchestration (kubernetes) and microservice environments is highly desirable Strong understanding of OWASP TOP 10 best practices Familiar with common vulnerabilities for Mobile applications a plus Familiar with centralized logging, monitoring and alerting solutions Experience with security tools such as Veracode and Qualys desired