Cloud Operations Lead

"Responsibilities: Set out DevSecOps requirements in standards, concepts and policies, in line with best practice, technology trends and cyberthreats Support and conduct internal audits, help mitigate findings and implement improvement measures Build and configure SecOps pipeline for various projects working with DevOps team Evaluate, select, design and configure security infrastructure systems in a global environment Design, implement, support and evaluate security-focused tools and services Conduct periodic Vulnerability assessment. Plan and create penetration methods, scripts and perform tests on computer systems, network and applications Research, evaluate, document and discuss findings with IT teams and management Review and provide feedback for information security fixes Establish improvements for existing security services, policies and procedures Requirements: 8-10 years of relevant experience Experience with OWASP, static/dynamic analysis, common security tools and integrating security tools to DevOps pipelines. Experience with Azure DevOps or similar product. Experience working with implementing Secrets Management products like Hashicorp Vault. Experience with penetration testing. Experience in assessing and applying security patches to critical infrastructure elements Good knowledge of Security Principles, techniques, and Technologies. (Like in ISO27034) Understanding of network and web related protocols (such as TCP/IP, UDP, HTTP, HTTPS, protocols) and security controls such as firewalls, IDS/IPS, Network Access. Understanding the container and serverless technology. Security Certification (OSCP, GPEN, CPT, CEH, or similar). Experience in scripting languages (python, bash etc). Ability to present security test results, their impact, mitigations to executive leadership"