Description

You will own the integration and maintenance of security verification components within CI/CD pipelines.

Responsibilities

• Create custom Docker containers to pull vulnerability management results and verify them using custom rules.
• Develop and maintain Jenkins pipelines, including feature enhancements and troubleshooting for scanning components.
• Build individual pipelines that allow users to run ad-hoc security scans outside of the full CI/CD build process.
• Automate routine security engineering tasks by developing custom scripts.
• Reformat security data from JSON and XML into human-readable reports using APIs.

Required Skills

• 5+ years of experience in DevSecOps or security engineering roles.
• Proficiency in Python, Java, JavaScript, and Bash.
• Hands-on experience with Docker for automating deployments and testing.
• Strong experience working with APIs and parsing data formats including JSON, XML, and HTML.
• Proven experience with Jenkins and GitHub.
• Direct experience with Docker security and vulnerability management tools.
• Ability to troubleshoot existing pipeline code and security scanning components.

Preferred Skills

• Experience with Veracode, BlackDuck, or Sysdig.
• Familiarity with OWASP Top 10 (2021 model) and secure coding practices.
• Experience integrating Synopsys into pipelines.

Key Skills

Education

Any Graduate