DevSecOps Specialist

Responsibilities:

Security Integration in Development:

• Collaborate with development and operations teams to implement recommended security practices in CI/CD pipelines.
• Manage and deploy security controls and tools for efficient vulnerability detection and mitigation.

Automation:

• Develop and maintain automated security testing and monitoring tools to enhance efficiency.
• Lead and manage security products and processes in CI/CD environments.

Security Architecture Development:

• Design and implement secure architectures for applications, infrastructures, and networks.
• Conduct comprehensive security architecture reviews and recommend improvements.

Regulatory Compliance:

• Ensure adherence to relevant regulatory requirements and industry standards.
• Perform regular audits and assessments to validate cybersecurity compliance.

Process Optimization:

• Propose and implement improvements to strengthen overall security posture within the department.

Requirements:

• Minimum of 2 years as a DevSecOps in a large organization with diverse development teams.
• Proven experience supporting development projects as a DevSecOps.
• Familiarity with tools like JFrog, Checkmarx, and Bitbucket (advantage).
• Proficiency in scripting and programming languages (e.g., Java, Shell, Python).
• Experience working with containers and orchestrators (e.g., Kubernetes, Docker).
• Knowledge of cloud security principles, with hands-on experience in GCP, Azure, or AWS preferred.
• Familiarity with security scanning tools and methodologies.

Understanding of DevSecOps Specialist