Job Description: As a Senior DevSecOps Engineer, you will be responsible for integrating security into the development, deployment, and maintenance of our software products, ensuring the highest standards of security and reliability. Job Responsibilities: Develop and implement metrics, reporting, and monitoring processes to track the effectiveness of DevSecOps practices, using tools like Dynatrace, ELK, Splunk, AWS CloudWatch and Sonatype Examples of metrics include vulnerability remediation times, security incidents, and code review coverage. Work closely with developers, IT operations, and security governance and operations teams to ensure security is integrated into all aspects of the development pipeline. Develop and implement security solutions throughout the software development lifecycle, from design to deployment and maintenance, using methodologies such as STRIDE, DREAD, CVSS, and the OWASP ASVS. Automate security processes and tools to enable continuous integration, continuous delivery, and continuous monitoring (CI/CD/CM) of applications and infrastructure. Establish a governance, review, and continuous improvement process for DevSecOps practices, ensuring alignment with organizational goals and industry best practices. Job Requirements: Relevant certifications such as CISSP, CEH, or OSCP are a plus. 3-5 years of relevant Cloud Engineer experience Strong understanding of software development processes, CI/CD principles, and Agile methodologies. Bachelor's degree in Computer Science, Engineering, Information Systems, or a related field. AWS Cloud Engineer/Practitioner certification Expertise in various security frameworks, tools, and technologies such as OWASP, SAST, DAST, IAST, RASP, and familiarity with toolsets such as SonarQube, Veracode, Checkmarx, and Fortify.
Jobsrican