Senior DevSecOps Engineer

Primary responsibilities / Key result areas

• Integrate Security across the SDLC
  • Incorporate security considerations and testing at the very beginning of the software development life cycle.
  • Implement secure coding methods to prevent vulnerabilities from being introduced into the software or IaC code
  • Integrate and automate security tools for continuous vulnerability scanning, threat modelling, and compliance checks within the CI/CD pipeline
• Collaboration & Culture
  • Work with development, operations and cybersecurity teams to ensure security is a shared responsibility
  • Promote a security-first mindset by providing training and guidance to all team members on DevSecOps best practices
  • Develop strong communication skills to collaborate effectively with various teams and stakeholders
• Process & Risk Management
  • Conduct comprehensive risk assessments to identify potential threats and develop strategies to mitigate them.
  • Develop and execute plans for responding to security incidents and investigating post-incident issues.
  • Ensure that applications and systems comply with relevant security standards and regulatory requirements.
  • Implement security controls and configurations through code, which allows for automated management and consistent security.
  • Implement continuous security monitoring of infrastructure, networks and applications to detect and respond to threats in real-time.
  • Provide Level2 support for the critical software systems and willing to provide on-call support.

Qualifications & Experience

• Graduated in Computer Science or Software Engineering (Bachelor's or Master's Degree level)
• Certified Ethical Hacker or Equivalent
• Certified Cloud Security Engineer or Equivalent
• Minimum 5 years of relevant work experience in DevSecOps
• Hand-on experience on Azure cloud platforms, containerization technologies (e.g., Docker, Kubernetes). Nutanix Kubernetes Platform is highly desired.
• Hands-on experience in deployment and management of production Postgres databases in Kubernetes - CloudNativePG operator
• Strong understanding of the entire Software Development Lifecycle
• Experience with CI/CD tools and patterns
• Knowledge of scripting and programming languages (e.g., Python, Bash)
• Familiarity with infrastructure as code (IaC) tools such as Terraform, Helm, ArgoCD/Flux, Ansible
• Knowledge of the best security practices and principles
• Excellent written and verbal communication skills
• Strong expertise in programming and automations

SES and its Affiliated Companies are committed to providing fair and equal employment opportunities to all. We are an Equal Opportunity employer and will consider all qualified applicants for employment without regard to race, color, religion, gender, pregnancy, sex, sexual orientation, gender identity, national origin, age, genetic information, protected veteran status, disability, or any other basis protected by local, state, or federal law.

For more information on SES, click here.