DevSecOps Engineer

We are seeking an experienced and highly motivated DevSecOps Engineer to join our team. The successful candidate will be responsible for designing, implementing, and maintaining secure, reliable, and scalable systems for our online websites. This position comes with the following KPIs:

Key Responsibilities:

• Collaborate with development, operations, and security teams to design and implement secure, reliable, and scalable systems.
• Automate security and compliance checks into the software development and delivery process to ensure compliance with industry standards.
• Establish and maintain security policies and procedures in alignment with industry best practices and compliance standards.
• Continuously improve the security posture of our systems by identifying and remediating vulnerabilities and weaknesses.
• Monitor security events to detect and respond to potential security threats in a timely manner.
• Ensure that all incidents are recorded and resolved within the agreed SLAs.
• Reduce the overall number of security incidents by implementing preventative measures.
• Maintain a comprehensive vulnerability management program to identify and resolve vulnerabilities within our systems.
• Work closely with the development team to ensure that all new code is developed with security in mind.
• Provide guidance and training to team members on secure coding practices and cybersecurity.

Key Performance Indicators (KPIs):

Vulnerability Management:

• Percentage of vulnerabilities identified and remediated within a defined timeline
• Number of critical vulnerabilities identified and remediated per quarter
• Time to remediate vulnerabilities

Incident Response:

• Mean time to detect and respond to security incidents
• Number of incidents reported per quarter
• Percentage of incidents resolved within a defined timeline

Compliance:

• Percentage of compliance audits passed per year
• Number of compliance violations identified and resolved per quarter
• Time to remediate compliance violations

Security Automation:

• Percentage of security checks automated within the development pipeline
• Number of manual security checks reduced through automation
• Time to implement new security checks into the pipeline

Collaboration:

• Number of cross-functional security training sessions conducted per year
• Percentage of development teams using secure coding practices
• Number of cross-functional security initiatives completed per quarter

Key Requirements:

• Bachelor's degree in Computer Science, Engineering, or related field.
• 5+ years of experience in DevSecOps or a similar role.
• Strong understanding of DevOps principles, tools, and practices.
• Solid understanding of cloud computing platforms, such as AWS or Azure.
• Experience with containerization technologies (e.g., Docker, Kubernetes).
• Strong understanding of security principles, including authentication, authorization, encryption, and network security.
• Experience with security testing and vulnerability scanning tools.
• Experience with web application firewalls (WAF), intrusion detection and prevention systems (IDS/IPS), and security information and event management (SIEM) systems.
• Excellent communication and collaboration skills.