Senior DevOps Security Engineer (DevSecOps)
Summary
Integrate security into the software development lifecycle by automating security measures, managing firewalls and encryption, and conducting vulnerability assessments. Core technologies include CI/CD pipelines, security scanners, and frameworks like OWASP and PCI DSS.
Your role at HFM:
- Implement
and maintain security measures within a DevOps environment, focusing on
automation and integration.
- Collaborate
closely with development teams to ensure security practices are effectively
integrated into the software development lifecycle.
- Configure
and manage security controls such as firewalls, access controls, and encryption
technologies.
- Perform
security assessments, conduct regular vulnerability scans, and assist in
remediating any identified issues.
- Monitor and
maintain security systems to ensure timely detection and response to security
incidents.
- Contribute
to incident response efforts by applying corrective actions in collaboration
with DevOps and engineering teams.
- Continuously
improve knowledge by staying up-to-date on emerging security trends, tools, and
technologies.
- Share
security best practices and assist in providing security guidance across teams.
Requirements
- Maximum 3 years of experience in DevOps security or
IT security roles.
- Strong understanding of security technologies
such as firewalls, access controls, SSL/TLS, SSH, and IPSec.
- Familiarity with security standards and best
practices, such as OWASP Top 10 and PCI DSS.
- Experience using vulnerability scanners and
penetration testing tools to assess and improve system security.
- Practical knowledge of DevOps principles,
including agile development and continuous delivery pipelines.
- Exposure to secure coding practices, such as
input validation and output encoding.
- Familiarity with security frameworks like the NIST
Cybersecurity Framework and ISO 27001.
- Eagerness to learn and grow in
DevOps security.
- Basic knowledge of security incident response,
including identifying and mitigating security incidents.
Benefits
- Hybrid
Work Model (2 days working from home)
- Monthly
Food Vouchers
- Comprehensive
Health & Life Insurance
- Summer
Short Fridays (August)
- Additional
Paid Annual Leave
- Birthday
Leave
- Udemy
Business access
- Referral
Bonus Program
Visa Sponsorship and Relocation Assistance
