DevSecOps

Role & responsibilities

1. •Strong experience as a DevOps engineer.

   • Experience in driving DevSecOps adoption and defining best practice, and guiding engineers to adhere to these.

   • Experience designing and implementing CI/CD pipelines.

   • Experience in defining and implementing logging and monitoring strategies.

   • Experience with GitLab, Azure, Azure Key Vault, Infrastructure as Code/Terraform, Docker/Kubernetes and PowerShell/YAML.

   • Experience defining and implementing security requirements.

   • Agile, Continuous Delivery and DevOps practices are part of your DNA.

   • Good communication skills both written and verbal.

   • Strong analytical and problem-solving skills, you like to figure out how things work.

   • Passion for learning and innovation.

   • Security Automation: Automate security testing (SAST, DAST, SCA) and compliance checks within the CI/CD pipelines (Jenkins, GitLab, Azure DevOps) to proactively identify and mitigate vulnerabilities early in the process.

   • Vulnerability Management: Conduct regular security assessments, vulnerability scanning, and penetration testing for web, mobile, and API applications, coordinating remediation efforts with development teams.

   • Cloud and Infrastructure Security: Design, implement, and manage secure cloud-based environments (Azure) and containerized platforms (Docker, Kubernetes, OpenShift), ensuring secure configurations and least privilege access controls.

   • Compliance and Governance: Establish and enforce security policies and procedures that comply with financial industry regulations (e.g., GDPR, FFIEC, MAS), generating detailed reports and metrics for leadership and auditors.

   • Threat Modeling and Incident Response: Perform threat analyses for applications and infrastructure, contributing to cross-functional incident response efforts and post-mortem analysis to prevent future occurrences.