Devsecops Engineer

Position Purpose

Resources hired through this JD will be responsible for DevSecOps tools set like NexusIQ, Fortify & SonarQube and other Testing applications like Performance Center.

Responsibilities

Direct Responsibilities

• Design, build, manage, upgrade, and support DevOps applications.
• Provide high-quality, efficient functional support services to business users, adhering to support standards as determined by support management.
• Handle incident and change management and reporting, working closely with stakeholders and infrastructure teams (System, DB, Networks).
• Demonstrate knowledge of the DevOps tools chain and the CI/CD process.
• Develop end-to-end pipelines and various jobs in Jenkins.
• Conduct Source Code Security Analysis and provide Static Application Support, either manually or using automated tools.
• Have hands-on experience with tools such as Sonatype/NexusIQ, Firewall, and Nexus Application Lifecycle.
• Be skilled in using Ansible and source code management tools based on GIT.
• Proficiently understand, explain, and assess security threats and vulnerabilities, defining their impact and probability.
• Have experience in team handling.
• Possess knowledge and experience in DevSecOps implementation.
• Preferably have knowledge in application/network architecture review, though not mandatory.
• Must be proficient in using Excel, Word, and PowerPoint.

Technical & Behavioral Competencies

• Cloudbees Jenkins & SonarQube
• Working knowledge of Kubernetes / Docker.
• Artifactory/Bitbucket knowledge
• Oracle Basics
• ITIL Foundation
• Linux / Shell Scripting
• Production Support Experience (like DR procedures, Patching Activity)