Job
Description
Role Responsibilities Implement DevSecOps practices within the development pipeline. Collaborate with development, operations, and security teams to ensure secure software delivery. Design and automate CI/CD pipelines for seamless integration. Conduct vulnerability assessments and implement necessary security measures. Maintain and optimize cloud infrastructure with a focus on security. Develop and execute security policies to protect application and data integrity. Monitor application performance and security post-deployment. Utilize infrastructure as code (IaC) tools to manage and provision resources. Provide support for incident management and root cause analysis. Assess and respond to application security threats and vulnerabilities. Work closely with developers to create secure coding standards. Conduct regularly scheduled security audits and compliance assessments. Train team members on security best practices and tools. Stay updated with the latest security trends and technologies. Participate in continuous improvement initiatives for DevSecOps processes. Qualifications Bachelor's degree in Computer Science or related field. Proven experience in DevSecOps or similar roles. Strong knowledge of CI/CD tools (e.g., Jenkins, GitLab CI). Experience with cloud platforms (e.g., AWS, Azure, Google Cloud). Solid understanding of application security concepts. Familiarity with containerization technologies (Docker, Kubernetes). Proficiency in scripting languages (Python, Bash, etc.). Excellent problem-solving skills and attention to detail. Strong verbal and written communication skills. Ability to work collaboratively in a fast-paced environment. Keen interest in continuous learning and professional development. Certifications in security (e.g., CISSP, CISM) are a plus. Experience with monitoring and logging tools (e.g., ELK Stack, Splunk). Knowledge of regulatory compliance requirements (e.g., GDPR, HIPAA). Experience in Agile or Scrum methodologies. Ability to guide teams in security implementations effectively. Skills: regulatory compliance,vulnerability assessment,glue,automation tools,agile methodology,scripting languages,lamda,cloud security,containerization technologies,ci/cd tools,application security,aws,monitoring and logging tools,continuous deployment,cloud platforms,devsecops,s3,continuous integration,pyspark,python Show more Show less
