Description

You will lead the integration of security practices into the DevSecOps pipeline, ensuring automated vulnerability detection and remediation across enterprise services.

Responsibilities

• Build and maintain Jenkins-based CI/CD pipelines with integrated security scanning and automation scripts.
• Conduct tool evaluations, build proof of concepts, and integrate security tools like Burp Suite Enterprise, Checkmarx, NowSecure, and OWASP ZAP.
• Analyze vulnerability assessments against OWASP Top 10 and SANS Top 25 standards, implementing technical remediations and turning standards into working practice.
• Drive consistency and standardization of DevSecOps services, utilizing Ansible and Python for infrastructure automation and IaC.
• Interface with technical and non-technical teams to provide consolidated reporting views and maintain user documentation.

Required Skills

• 10+ years of experience in DevSecOps or DevOps engineering.
• Strong proficiency in Python for automation and scripting.
• Hands-on experience with Ansible for Infrastructure as Code.
• Expertise in integrating security tools (Burp Suite, Checkmarx, OWASP ZAP) into CI/CD workflows.
• Working knowledge of API interactions with web services provided by security tools.
• Experience with Agile tools including Jira, Jira Align, Miro, and Confluence.
• Degree in Digital Forensics, Information Security, DevOps, or IT-related discipline.
• Relevant industrial security or DevSecOps certifications.

Key Skills

Education

Any Graduate