|
What will you be responsible for?
- Embed security automation across build, test, and deployment workflows.
- Develop and maintain secure CI/CD pipelines.
- Conduct vulnerability scanning, triage, and risk assessment.
- Work with developers to ensure secure coding and remediation best practices.Maintain cloud security including IAM, network policies, secrets, and encryption.Implement container security, image scanning, and runtime protections.Build dashboards for security metrics, alerts, and compliance tracking.
- Support incident response and root cause analysis.Stay updated on emerging threats and security technologies.
What would your day look like?
- Take on technical security leadership for application/solution implementation and transformation projects in applicable domains.
- Identify, develop, and enforce technical security standards, and secure architecture and design patterns for applicable domains.
- Develop security architecture, design, and blueprints for the target state, and ensure their effective elaboration, validation, and communication within the projects and stakeholders.
- Guide application team on Secure Code Review, Penetration Testing, and security issue remediation.
- Perform security readiness audits and support internal and external security auditing on applications/solutions. Report on application/solution security status for applicable domains.
- Identify major application/solution deficiencies and define/craft pragmatic approaches on how to remediate them at scale.
- Advise and work with application/solution owners and vendors to design and configure systems that meet security requirements, while balancing security and user experience.
- Drive implementation of security controls, including security hardening.
- Drive new technology/product evaluations through Proof of Concept (PoC) with other architects/engineers.
- Review technology objectives for programs and services and make recommendations for their security requirements.
- Evangelize and promote IT Security culture across the organization.
- Drive accountable areas for results. Take ownership of the environment, teams, operations, initiatives, and projects within areas of accountability, sometimes in ambiguous circumstances.
Who are we looking for?
- Bachelor’s degree in Computer Science, Engineering, Information Security, or equivalent experience.
- 4–10 years of experience in DevSecOps, Application Security, or Cloud Security roles.
- Strong experience with CI/CD, cloud platforms, and security automation tools.
- Certifications are a plus (AZ-500, AWS Security Specialty, CISSP, CKA, CEH).
- CI/CD Tools: Azure DevOps, GitHub Actions, GitLab CI, Jenkins.
- Security Tools: SAST (SonarQube, Checkmarx), DAST (OWASP ZAP), SCA (OWASP Dependency Check, Snyk), Container Security (Trivy, Aqua).
- Cloud Security: IAM, Secrets Management, Key Vault, KMS, Security Groups, WAF.
- IaC & Automation: Terraform, Helm, Ansible, ARM, CloudFormation.
- Containerization & Orchestration: Docker, Kubernetes, AKS/EKS/GKE.
- Monitoring: Prometheus, Grafana, ELK, SIEM tools.
-
|