Description

Lead DevSecOps initiatives across cloud environments, focusing on security automation, vulnerability remediation, and identity management.

This role is on-site.

Responsibilities

• Lead vulnerability remediation, scanning, and certificate management processes.
• Develop automated security frameworks for deployment tools using scripting and open-source solutions.
• Integrate security scanning, such as Prisma, into clusters and CI/CD pipelines.
• Manage identity and access management, data analysis for security monitoring, and compliance efforts.
• Mentor team members on security concepts and participate in Agile project lifecycles.

Required Skills

• 5+ years of experience in production engineering or a related position.
• Hands-on experience with Google KMS (Design, Engineering, Ops) and GCP security.
• Proficiency in Terraform, IaC, and PaC for deployments.
• Strong Linux skills and scripting proficiency in Bash and Python.
• Experience with CI/CD, continuous testing, and configuration management methodologies.
• Knowledge of API security, container security, and cloud security management.
• Familiarity with DevOps tools including Ansible, Bitbucket, Prisma Cloud, and Digital.ai.
• Understanding of compliance standards including PCI-DSS, HIPAA, SOX, GDPR, and CCPA.
• Knowledge of security frameworks such as CIS and NIST.

Preferred Skills

• Experience with Venafi, HashiCorp Vault, or IBM Guardium.
• Experience performing vulnerability assessments using Tenable or Nmap.
• Familiarity with APM and telemetry tools like Dynatrace or Elastic.

Key Skills

Education

ANY GRADUATE