We are seeking a DevSecOps Engineer to join our team. The ideal candidate will have a strong background in both software development and security, with knowledge of implementing security controls and practices within a DevOps environment. The DevSecOps Engineer will be responsible for ensuring the security of our clients software development pipelines and infrastructure by implementing security controls, automating security testing, and providing guidance and best practices to development teams.
Responsibilities
- Implement security controls and practices within the software development pipeline, including continuous integration and continuous delivery (CI/CD)
- Automate security testing, including static and dynamic analysis, as part of the software development pipeline
- Provide guidance and best practices to development teams to ensure secure coding practices
- Stay current with new vulnerabilities and attack techniques
- Collaborate with other teams to ensure that security is integrated into the software development lifecycle
- Participate in incident response and remediation activities as needed
- Ensure compliance with industry and regulatory standards
- Conduct threat modelling and penetration testing
Qualifications
- Knowledge of software development and security
- Strong understanding of DevOps principles and practices, including CI/CD
- Familiarity with industry-standard security testing tools (e.g. Burp Suite, OWASP ZAP)
- Familiarity with common web and mobile vulnerabilities (e.g. SQL Injection, XSS, CSRF)
- Strong understanding of software development principles and the software development lifecycle
- Experience with programming languages such as Python, Java, .NET, and JavaScript
- Strong communication and report-writing skills
- Familiarity with cloud environments (e.g. AWS, Azure)
- Knowledge of Docker and Kubernetes
