Cloud applications & DevOps security engineer

About Forvis Mazars

Forvis Mazars is a leading international professional services firm. We are a united partnership delivering exceptional quality in audit, accounting, tax, financial advisory, outsourcing and consulting. Forvis Mazars is also a great place to be, with a diverse culture and a clear focus on helping people reach their personal aspirations. Together, we make a difference by helping to create a fair and prosperous world.

At Forvis Mazars, we celebrate individuality and thrive on teamwork. We give people the freedom to make a personal contribution to our shared purpose. We support one another to deliver quality, create change and make an impact, so that everyone can reach their full potential.

That’s why Forvis Mazars is the smart choice.

About Technology & digital solutions

The Technology & digital solutions (T&DS) is leading Forvis Mazars digital transformation. We aim at providing Forvis Mazars professionals with a seamless digital experience allowing greater collaboration worldwide in a safe environment. As a result, they’ll be empowered to deliver more value to clients every day.

To reach these goals, T&DS transformation program aims at consolidating the IT operations from a multi-local model spread across 100+ countries into a global model. This includes the infrastructure and the operating model needed to support the business, people and clients now and in the future.

The success of this change relies on the great expertise and relentless engagement of every member of the team. This is a great moment to join the Technology & digital solutions organization and be part of the delivery of this major transformation over the coming years!

Cloud applications & DevOps security engineer

Role purpose, accountabilities, experience, knowledge, and skills

The Cloud applications & DevOps security engineer is a critical role within the Cyber and Data protection team. The role will ensure that all aspects of Application build and run are secured and compliant with the security best practices. He/she will be responsible that all the application that are managed by T&DS are covered by Security standards and the compliance is monitored. In the same way, he/she will be responsible that the Forvis Mazars CASB is covered by Security standards, and the compliance is monitored. He/she will have to develop and maintain the Application build and run, DevOps and CASB strategy and will be responsible of the security applications of Forvis Mazars related to Application, DevOps and CASB. You would like to become our new Cloud Applications & DevOps security referent and join a dynamic, friendly and collaborative team, just one thing to do, apply !

Key responsibilities

• Defining and managing the Forvis Mazars CASB project
• Defining and maintaining applications, DevOps and CASB security standards.
• Monitoring applications, DevOps and CASB security compliance
• Keeping stakeholder inform by building performance reports and maintaining KPI.
• Managing applications, DevOps and CASB and their compliance at the global level (Defender for Cloud Apps, Falcon Shield, …).
• Managing applications, DevOps and CASB security projects.
• Writing and maintaining the applications build and run, DevOps and CASB security process and procedures for Forvis Mazars including the compliance of local countries
• Defining, updating and manging KPI related to his/her perimeter
• Contributing to the T&DS certifications process
• Providing support level 3 to internal teams on topics related to applications, DevOps and CASB
• Investigating security incident at level 3
• Ensuring a security watch and staying up to date on the latest IT and cybersecurity developments
• Being backup on some other team products/projects
• Contributing to team life

Key Skills

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• A Master’s degree with a cybersecurity specialization is preferred.
• Minimum of 5 years of experience in IT with at least 2 years in cybersecurity or managing security
• Fluent in English and at least another language
• Technical Skills:

Must Have:

• Web applications security: API, Identification, Authentication, Encryption, SSO, Token, Federation, …
• Web application programming language : java, php, html, css, java script, …
• DNS and SSL certificate management
• Management of a CASB solution (ideally Defender for Cloud apps)
• Secure coding tools: Checkmarx, Owasp zap, dependencies checker, …
• DevSecOps methodology: IAC, GITLAB, CI/CD pipeline, SAST, DAST, IAST, …
• Ability to work with Cyber security frameworks: NIST, ISO 27K, CIS, CISA Scuba, OWASP, …
• PowerShell or other scripting language

Nice to Have:

• Knowledge of Azure infrastructure
• Knowledge of Virtualization (VM, Docker, VDI, …)
• Knowledge of security protocol and encryption (TLS, X509, ciphers, hashing, salting, …).
• Ability to conduct Risk analysis
• Management of MS Defender Suit