DevSecOps

As a DevSecOps Engineer, you will be responsible for integrating security practices throughout the development lifecycle. You will work closely with development, operations, and security teams to implement security controls, automate security processes, and ensure secure application deployment.

Key Responsibilities:

• Security Integration: Incorporate security practices and tools into the CI/CD pipeline to ensure secure code development, deployment, and operations.
• Vulnerability Management: Implement and manage vulnerability assessment and remediation processes, including scanning, patching, and addressing security issues in applications and infrastructure.
• Automated Security Testing: Develop and maintain automated security testing frameworks, including static and dynamic analysis, to identify vulnerabilities and ensure code quality.
• Compliance: Ensure that all systems and processes comply with relevant security standards, regulations, and best practices, such as GDPR, HIPAA, and NIST.
• Incident Response: Participate in security incident response activities, including identifying, investigating, and mitigating security incidents and breaches.
• Monitoring and Logging: Implement and manage security monitoring and logging solutions to detect and respond to security threats in real-time.
• Security Policies: Develop and enforce security policies, procedures, and best practices to safeguard the organization's assets and data.
• Collaboration: Work with development, operations, and security teams to provide guidance on secure coding practices, configuration management, and incident resolution.
• Continuous Improvement: Stay up-to-date with the latest security threats, trends, and technologies, and continuously improve security practices and tools.