Senior DevSecOps

Cluj-Napoca, Hybrid / Remote, RO

Applications have closed

We are a digitally native company that helps organizations reinvent themselves and unleash their potential. Our innovative approach combines design, engineering, and scale to create cutting-edge solutions for our clients.

 

Right now, we are looking for a Senior DevSecOps to join our team!

 

You will get the chance to:

  • Design, implement, and maintain secure and scalable DevOps pipelines, incorporating security practices throughout the software development lifecycle.
  • Automate testing, deployment, and other tasks related to software delivery.
  • Collaborate with development, operations, and security teams to identify and address security vulnerabilities, ensuring adherence to industry best practices and regulatory requirements.
  • Setup, testing and integration of CI/CD tools.
  • Monitor and analyze system logs, application performance metrics, and security incident reports, proactively identifying and responding to security threats.
  • Automate infrastructure and deployment processes using Github Actions, UNIX Shell Scripts, Powershell, Terragrunt, Helmfile.
  • Establish standards and design patterns for Azure Cloud.
  • Implement CI/CD Pipeline to plan, scan and deploy IaC code.
  • Configure Jira projects, workflows, boards, dashboards and automations.
  • Be part of our Cloud Studio, a community of expertise combining the best cloud technologies, continuous integration and continuous delivery practices.
  • Create revolutionary solutions with our team of professionals.
  • Make an impact. Work in large-scale projects globally.

 

What will help you succeed:

  • Minimum bachelor's degree in Computer Science, Engineering, or related field.
  • Must have experience in DevSecOps tooling and CI/CD pipelines.
  • Must have hands-on experience working on Azure/AWS.
  • Strong knowledge of version control systems (e.g., Git/Github/Gitlab).
  • Hands-on experience with Github Actions and Workflow.
  • Must have hands-on experience in Linux server administration, and shell scripting with Bash and Python etc.
  • Hands-on experience with containerisation, specifically Docker and containerisation technologies e.g. EKS/AKS/GKE.
  • Hands-on experience with Helm charts.
  • Hands-on experience with build tools such as Maven, Gradle, or NPM/Yarn.
  • Experience integrating Continuous Code Quality Analysis tool into the CI/CD pipeline.
  • Experience integrating Static Application Security Testing (SAST) scanning into the CI/CD pipeline.
  • Experience integrating Software Composition Analysis (SCA) scanning into the CI/CD pipeline.
  • Experience integrating container static and dynamic scanning into the CI/CD pipeline.
  • Sound technical background of working with Dynamic Application Security Testing (DAST).
  • Hands-on experience with container image hardening and automation.
  • Working experience with repository managers like Nexus and Artifactory.
  • Must have hands-on experience with configuration management systems such as Terraform, Packer and Ansible.
  • Ability to implement effective monitoring and alerting.
  • Good understanding and working knowledge of Agile projects such as SCRUM and KANBAN.
  • Speaking English at a fluent level.
  • Troubleshooting and analytical skills.
  • Strong communication and collaboration skills.
  • Maintain detailed documentation of CI/CD pipelines and security configurations and procedures.

 

If you want to know more about our benefits and perks click here

 

* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰

Job stats:  10  3  0
Category: DevSecOps Jobs

Tags: Agile Ansible Application security Automation AWS Azure Bash CI/CD Cloud Computer Science DAST DevOps DevSecOps Docker GitHub GitLab Helm Jira Kanban Linux Maven Monitoring PowerShell Python SAST Scripting Scrum SDLC Terraform UNIX Vulnerabilities

Region: Remote/Anywhere

More jobs like this

Explore more InfoSec / Cybersecurity career opportunities

Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.