DevSecops Specialist

HE ROLE As part of the Security Team, you will be a self-starter who enjoys a fast paced environment, thrives on problem solving, and is committed to delivering world class security to the organization and our customers. In this position you will be working closely with cloud and security tooling, integrations, scripting and automation.

In addition, you will bring a secure development lifecycle mindset that will establish foundational security requirements for teams to consume. Lastly, in this role, you will be a trusted security advisor to the organization that fosters a natural bridge-building mindset. As a team member, you will help inspire, mentor, and lead by example as we strive to make a positive impact on our customers and the business.

THE SKILL SET You have 5+ years of experience in a Dev. Sec. Ops, SRE, DevOps, TechOps or Cloud. Ops role. You have advance experience with at least one popular programming language, such as Python, Java, Kotlin, Go, Rust, Ruby, etc You have extensive security experience with cloud services in AWS, including establishing Control Tower type governance Experience securing microservices and/or Service Oriented Architecture Experience with securing container environments like Docker Experience securing APIs, both internal service and HTTP APIs Experience securing CI\CD pipelines.

Experience with SAST, DAST and IAST type code scanning & automation You have experience developing metrics and insights to help drive remediation You have extensive experience with vulnerability management and remediation lifecycles, working closely with technical teams to remediate issues You have experience with WAF, IPS, IAM, SIEM, SOAR, DLP, endpoint, logging, key & configuration management technologies You have experience improving security / engineering standards, tooling, and processes You enjoy mentoring and teaching colleagues at all levels, while also learning from them Expertise with infrastructure provisioning tools like Cloud.

Formation, Terraform, Chef, Puppet, or others Familiarity with continuous integration tools like Jenkins, Code. Pipeline, or CircleCI Ability to take initiative and produce results with great communication and collaboration skills - we put a lot of emphasis on being team players. Bonus Skills: CISSP, CCSP, OSCP, or any AWS certifications.