DevSecOps Specialist (junior/regular/senior) (She/He/They)

41_R00144043

Obowiązki

• Collaborate with design and development teams to implement security principles from the start of the SDLC, fostering innovation and growth.

• Support migration and transformation projects, integrating security in new technology layers and public cloud environments.

• Develop and manage the CI/CD process, automating security steps to enhance efficiency and scalability.

• Automate security tasks within DevOps processes using tools like Ansible, Azure DevOps, Jenkins, and GitLab, driving continuous improvement.

• Conduct security assessments of hybrid solutions, supporting teams with public cloud security (Azure, GCP, AWS).

• Secure public cloud environments and microservices-based environments (AKS, GKE, EKS, Red Hat Openshift).

• Analyze security of API, application, or IaC code, enhancing DevOps environments with robust security elements.

• Design, develop, and evolve CI/CD environments by integrating security tools (SonarQube, DefectDojo, Fortify, Checkmarx, Veracode, Checkov, Semgrep, Nessus, Aqua Security), ensuring continuous growth and innovation.

Wymagania

• Work on projects for international clients, expanding your security skill set. Gain insights and feedback from a diverse team of over 120 cybersecurity experts in Poland and thousands across the world.

• Thrive in an exciting workplace that values and celebrates diverse perspectives. Contribute to a creative environment where your ideas are welcomed.

• Engage in creative projects that foster your development as cybersecurity specialist. Access continuous learning through workshops and skill-building initiatives.

Oferujemy

• Knowledge of cyber security area or a desire to deepen your knowledge in this field, backed up by at least a few years experience working in IT or in a DevOps role.

• Experience with one of the three leading clouds - Azure, GCP or AWS.

• Practical knowledge of CI/CD processes and familiarity with CI/CD tools like Azure DevOps, Jenkins, GitHub etc.

• Issues related to web application security (OWASP TOP 10 etc.) and secure coding best practices and knowledge of popular attack methods (XSS, CSRF, SQL injection, etc.) and frameworks such as MITRE.

• Practical experience of working with models: on-prem, IaaS, PaaS, SaaS.

• Experience with containerisation (Docker) and containerisation-based infrastructure platforms: Kubernetes, OpenShift, Anthos, etc.

• SAST, DAST, SCA issues and their practical implementation within CI/CD processes and issues related to authorization, authentication or session management (SAML, OAuth, SSO, etc.).

• Knowledge of the SSDLC process and its components and Rest API technology and the API Gateway concept.

Źródło: Accenture/Praca