Key Duties & Responsibilities

The DevSecOps Engineer will carry out these functions:

• • Implement secure practices i. e Vulnerability Scanning, Certificate Management, Password Policy Management, Data Analysis of security monitoring outputs, defense in- depth and monitoring and event response tool sets to handle growing threats and other security and compliance.
  • Responsible for executing and implementing Security Development Lifecycle (SDLC) for products and services.
  • Implement encryption, privilege management, logging, input validation, secure storage design and secure data transfer across various platforms.
  • Managing cryptography and encryption of data in the cloud.
  • Implement security through code development and infrastructure code reviews, establishing security ecosystems utilizing APIs and event driven security response.
  • Develop positive partnerships and work closely with other stakeholders to align and execute infrastructure changes in a secure manner to support Customer’s tools, apps, and processes.
  • Work closely with the Engineering team to provide guidance on security weaknesses in the Product development and Customer environment.
  • Provide security requirements for projects and initiatives.
  • Conduct security risk assessments, planning, policy reviews, gap analysis, status/progress reports and action plans.
  • Implement security automation via a DevSec pipeline.
  • Carry out vulnerability management, automation and remediation
  • Performing threat simulations and penetration tests to identify and detect possible risks.
  • Hands-on experience using securing container technologies.
  • Securing Container and Kubernetes images at rest, build, and runtime.
  • Work closely within the DevOps, Solution Architect, Software Engineers and DBAs to refine and enforce best security practices.

Experience

• • Bachelor’s in Computer Science or Computing Systems or equivalent degree. Bachelor’s degree in Computer Science, Electrical/Electronic Engineering, Information Technology, or another related field.
  • Minimum of 3-5 years of prior relevant experience
  • Certifications/Training – OSCP, CISSP, CISA, CISM, CEH, CCNA, CCNP

Other Requirements:

• Sense of ownership and pride in your performance and its impact on company’s success.
• Critical thinker and problem-solving skills.
• Team player.
• Good time-management skills.
• Interpersonal and communication skills.

Why Join Us

• Training and professional development opportunities
• Exceptional governance structure.
• Forward thinking results oriented culture.
• Smart and passionate colleagues.
• Flexible work environment.

We welcome interaction with brilliant minds.

To apply please send your CV and a short covering letter to careers@descasio.com