DevSecOps Engineer

We are looking for a DevSecOps Engineer that is passionate about automating, developing, and executing DevSecOps best-practices and integrated security automation. Part of IT Security team with responsibilities for penetration testing, security patching and antivirus solutions, the DevSecOps engineer main objective will be to consult and support development teams automating and shifting left the security testing, in a cloud based, microservices, containerized environment using Java and .Net tech stacks.

Job Summary

• Collaborate with information security team, DevOps and engineering teams to identify Developers Platform needs and issues with respect to security
• Work with Scrum Masters, Business Analysts, and Developers to facilitate the flow of continuous development through a secure, stable CD/CI pipeline
• Consult DevOps teams for creating Security Unit Tests and usage of SAST and DAST
• Conducting proactive research to analyze security weaknesses and recommend best development practices, which may be general or language specific

Knowledge and skills requirements

• Knowledge of architecture and design of solutions using cloud-based technologies
• Proficient with a variety of software development languages, tools and techniques
• Proficient with a variety of DevOps tools and techniques
• Proficient in scripting and automation tools such as PowerShell, Ansible Playbooks and Python
• Proficient at integration of various tools into DevOps pipeline such as Jenkins, Git
• Working knowledge of the Agile methodology
• Familiar OWASP Top, OWASP ASVS (Application Security Verification Standard), Threat Modeling

Ideally, you will also have

• Experience with automated tools such as Whitesource and Black Duck
• Hold or actively pursuing security-related professional certifications within the GIAC family (GSSP-JAVA, GWEB, )
• Strong English language skills

Education

• A degree in Computer Science or related major, or equivalent work experience

What we offer?

• Opportunity to learn and work with a variety of technologies
• Career programs
• Multicultural, Agile environment that encourages new ideas and innovation
• Flexible working hours
• Lunch tickets
• Medical subscription and life insurance
• Private pension
• Fitness centers discounts, sports activities and other company events
• Good transport connections and free parking
• Relaxation area (ping pong, foosball, massage)
• Free account
• And…fresh orange juice, good coffee, fresh fruits.