DevSecOps

Personal Traits:

Passion for the profession

Team Player and self-Driven

Excellent written and verbal communication skills

Capability to build working relationships with key stakeholders

Ownership and delivery on complex projects

Proficiency to communicate over a text-based medium and can succinctly technical details

Strong self-learner

Requirements:

Comes from an enterprise/corporate (not start-up) background

A minimum of 3 years' experience working in DevOPS engineering, cloud security, or system engineering

A minimum of 1 years experience working with incident response

Substantial knowledge of the Linux operating system and common OS hardening practices

Experience with infrastructure vulnerability scanning, vulnerability management and patching practices

Experience with logging systems and log analysis and in using log analysis platforms (not forensics)

Experience with Cloud Platforms Azure and Amazon Web Services

Experience with one or more programming languages (preferable Python and Java, Go, nice to have)

Experience with orchestration technologies - Terraform – a must.

Working experience with Kubernetes and Docker

Technical knowledge of systems in a multi-tenant, cloud environment

Experience with infrastructure-as-code

Assist in the design, evaluation, implementation, and deployment of new security tehnologies.

Ability to use GitHub and AzureDevOPS (CI/CD) – build and manage pipelines and repositories, design, implement and perform code security scans (e.g. SonaQube, Git Security, Checkmarx, Mend, etc.), manage CI/CD processes.

Demonstrated at least basic experience with incident response.

Substantial knowledge of the Linux, Windows and MACOS operating systems.

Demonstrated experience with running systems at scale.

Responsibilities :

Implementation of vulnerability management and patching policies

Perform and report on the adoption of cloud security practices.

Perform root cause analysis (RCA) to CVE’s and Security Events and Vulnerabilities

Develop/review/update existing security-related configurations of the product infrastructure

Contribute to creation of runbooks and to the production and tuning of security monitoring detection rules

Run POC’s, perform research, work with 3rd party vendors and different teams and departments.

Be an integral part of the DevOps Team