DevSecOps / Applications Security

Job Description

 Cybersecurity Division 

Project: Adoption of SAST (Static Application Security Testing)/ SCA (Software Composition Analysis) & Pipelines Security control. 

Main tasks:

• Strengthen the adoption of SAST (Static Application Security Testing)/ SCA (Software Composition Analysis) in the company.
• Coordinate with the various Security champions in Dev teams to reduce false positives, provide advice on in-place controls at CI/CD level.
• Accompany the Devs for the security-oriented code review.
• Pipelines security control.
• Audit of pipelines (Azure DevOps and Jenkins).
• Analysis of findings, review of these findings with the teams.
• CIS Benchmarks (Center of Internet Security).
• Standardization and automation with Terraform.
• Tools : Fortify, SonarQUBE.

Profile:

• DevSecOps with Kubernetes, Azure DevOps / AWS knowledge.
• Familiar with SAST (Static Application Security Testing)/SCA (Software Composition Analysis).
• Understanding of security challenges for the development and code review process.
• Familiar with Terraform or other "Infrastructure as a code" tools.
• Familiar with tools like Fortify, SonarQUBE, Checkmax.