Devsecops Engineer

Things youll do:

Consult software development teams in design and architecture of secure systems. Collect, identify, and develop best practices, patterns, and anti-patterns for specific security-related problems.Perform threat modeling exercises and propose technical controls for critical systems, conduct and facilitate technology security reviews including Secure SDLC testing requirements & Identify, prioritize, and help implement security improvements that maximize security while keeping developers productiveServe as security thought leader for all application security automation. Design, prototype, support, and evaluate security-focused tools and services including project leadership. Assist with triage of findings from security tools. Develop and refine rules and checks for security automation.
Research new security technologiesIdentify and understand inherent, systemic high-risk security issues that could lead to security incidents. Architect, design, prototype, support, and validate scalable security solutions to eliminate systemic issues, including project leadership.

Qualifications:

5+ years of experience in product software development
Experience in python scripting, devops, CICD, Jenkins.
Experience in several aspects of security:
Security design and threat modeling.
Security consulting and development of best practices, patterns and anti-patterns, secure-by-default solutions
Research of new security technologiesSystemic security issues: identifying, root cause analysis, designing security solutions, including project leadership
Web application security experience:
web application vulnerabilities and mitigations beyond the OWASP Top 10
Expert in web browser security
Experience with federation protocols (SAML, OAuth).Network security experience:
Building network security architectures for complex global networks
Network and web related protocols such as, TCP/IP, UDP, IPSEC, HTTP, HTTPS.
Hands-on experience with fuzz testing to identify vulnerabilities and security risks in different Protocols and interfaces
Knowledge of cloud-based security principles; cloud security vulnerabilities and their best practices.Bachelors degree, Master’s degree preferred, (or equivalent experience) in Computer Science or related field
Strong sense of ownership, urgency, and drive
Demonstrable teamwork skills and resourcefulness
Possess self-drive to keep moving things forward even in the face of ambiguity and imperfect knowledge (avoid “analysis paralysis”)
Sharp analytical abilities and proven design skills