{"id":14030,"date":"2023-10-17T04:52:25","date_gmt":"2023-10-17T04:52:25","guid":{"rendered":"https:\/\/www.genesesolution.com\/bd\/?page_id=14030"},"modified":"2023-10-17T04:52:25","modified_gmt":"2023-10-17T04:52:25","slug":"devsecops-engineer","status":"publish","type":"page","link":"https:\/\/www.genesesolution.com\/bd\/devsecops-engineer\/","title":{"rendered":"DevSecOps Engineer"},"content":{"rendered":"

[et_pb_section fb_built=”1″ custom_padding_last_edited=”on|desktop” admin_label=”Section” _builder_version=”4.4.8″ background_color=”#f2f5fc” background_enable_image=”off” custom_padding=”120px|120px|120px|120px|false|true” custom_padding_tablet=”|20px||20px|true|false” custom_padding_phone=”60px|0px|60px|0px|true|false” da_disable_devices=”off|off|off” locked=”off” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on”][et_pb_row _builder_version=”4.4.8″ custom_margin=”||0px||false|false”][et_pb_column type=”4_4″ _builder_version=”4.4.6″][et_pb_text _builder_version=”4.9.4″ header_2_text_align=”left” header_2_text_align_tablet=”center” header_2_text_align_phone=”” header_2_text_align_last_edited=”on|phone” header_2_font_size_tablet=”” header_2_font_size_phone=”36px” header_2_font_size_last_edited=”on|phone”]<\/p>\n

DevSecOps Engineer<\/span><\/h2>\n

[\/et_pb_text][et_pb_text disabled_on=”off|off|off” _builder_version=”4.9.4″ _module_preset=”default” custom_margin=”||28px|||” hover_enabled=”0″ sticky_enabled=”0″]<\/p>\n

We are seeking a highly motivated and skilled DevSecOps Engineer to join our team and drive secure deployments, support goals, enable CI\/CD automation, and manage risk.<\/p>\n

[\/et_pb_text][et_pb_button button_url=”#apply-btn” button_text=”Apply Now” button_alignment=”left” _builder_version=”4.9.4″ button_text_size=”17px” button_text_color=”#ffffff” button_bg_color=”#155a73″ locked=”off”][\/et_pb_button][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ admin_label=”Section” _builder_version=”4.4.8″ background_enable_color=”off” background_enable_image=”off” background_size=”initial” background_position=”bottom_right” custom_padding=”80px|120px|0px|120px|false|true” custom_padding_tablet=”|20px||20px|true|true” custom_padding_phone=”60px|20px|60px|20px|true|true” background_last_edited=”on|desktop” background_enable_image_tablet=”off” background_enable_image_phone=”off” parallax_tablet=”off” background_size_tablet=”initial” background_position_tablet=”bottom_right” da_disable_devices=”off|off|off” locked=”off” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on”][et_pb_row custom_padding_last_edited=”off|desktop” _builder_version=”4.4.8″ custom_margin=”|auto|24px|auto|false|false” custom_padding=”0px||0px||false|false”][et_pb_column type=”4_4″ _builder_version=”4.4.6″][et_pb_text _builder_version=”4.9.4″ header_5_font=”GTWalsheimPro-Medium||||||||” header_5_font_size=”18px” header_5_line_height=”1.33em” custom_margin=”||40px||false|false” hover_enabled=”0″ sticky_enabled=”0″]<\/p>\n

Job Title: DevSecOps Engineer<\/span><\/b><\/p>\n

Designation: DevSecOps Engineer<\/span><\/b><\/p>\n

Reports to<\/b>:\u00a0<\/span>Chief Information Security Officer (CISO)<\/p>\n

Location: Remote<\/span><\/b><\/p>\n

Shift: Standard (09:00 AM to 06:00 PM) from Monday to Friday <\/span><\/b><\/p>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.4.6″ custom_margin=”|auto|-11px|auto|false|false”][et_pb_column type=”4_4″ _builder_version=”4.4.6″][et_pb_text _builder_version=”4.9.4″ header_5_font=”GTWalsheimPro-Medium||||||||” header_5_font_size=”18px” header_5_line_height=”1.33em” custom_margin=”||0px||false|false” custom_padding=”||40px|||”]<\/p>\n

Position Overview<\/b><\/h5>\n

The DevSecOps engineer is an advanced role to help support, secure, manage and deploy solutions that support business objectives. The role is highly technical, and candidates must possess a solid understanding of information security, infrastructure, software and various operating systems. The role also requires an understanding of business goals\/strategy and operational requirements in a fast-paced environment. The DevSecOps engineer supports continuous integration and continuous deployment (CI\/CD) initiatives and is an integrated team member working with software developers, system engineers, cybersecurity engineers and systems administrators. At times, the DevSecOps engineer acts as a liaison with business stakeholders to understand the strategy and execution outlook. The role is heavily security-focused and ingrained in the CI\/CD pipeline automation to deliver security principles and validation at all times. The DevSecOps Engineer is responsible to develop and implement DevSecOps as a service offering to the enterprise and customers.<\/span><\/p>\n

DevSecOps engineers have a strong work ethic, perform analytical and critical thinking, and are masterful at meeting change requests on demand. They are expected to work well with business units and possess superior listening and communication skills, in addition to expected technical expertise. In tandem with security and technical leadership, and with multi-disciplinary departments, DevSecOps engineers embody security-first principles, constantly assess the threat landscape and adapt quickly to manage enterprise risk, as well as integration and deployment requirements.\u00a0<\/span><\/p>\n

[\/et_pb_text][et_pb_text _builder_version=”4.9.4″ header_5_font=”GTWalsheimPro-Medium||||||||” header_5_font_size=”18px” header_5_line_height=”1.33em” custom_margin=”||0px||false|false” custom_padding=”||0px|||”]<\/p>\n

<\/b><\/h5>\n
Roles and Responsibilities<\/b><\/h5>\n
    \n
  1. Lead the development and implementation of DevSecOps practices within the company and extend them as a customer service, integrating security, development, and operations for secure and efficient software delivery.<\/span><\/li>\n
  2. Build relationships with developers, stakeholders and scrum masters to incorporate security principles into engineering design and deployments.<\/span><\/li>\n
  3. Supervise testing and validation in application security controls across projects.<\/span><\/li>\n
  4. Oversee implementation of defensive practices and countermeasures across infrastructure and applications.<\/span><\/li>\n
  5. Draft and uphold CI\/CD security strategy and practices in tandem with other technical team leads.<\/span><\/li>\n
  6. Serve as a point of contact for security-based escalations and remain tightly involved through resolution.<\/span><\/li>\n
  7. Build services and tools to enable developers and engineers to easily use security components produced by application security team members.\u00a0<\/span><\/li>\n
  8. Simplify automation that applies security inter-workings with CI\/CD pipelines.<\/span><\/li>\n
  9. Enrich DevOps architecture with security standards and best practices.<\/span><\/li>\n
  10. Support the ability to \u201cshift left\u201d and incorporate security early on and throughout the development lifecycle with risk assessments, architecture reviews and threat modeling.<\/span><\/li>\n
  11. Identify vulnerabilities in code through automated and manual assessments (SAST, DAST, IAST, RASP, and SCA tools), and promote quick remediation.<\/span><\/li>\n
  12. Communicate vulnerability results in a manner understood by technical and non-technical business units based on risk tolerance and threat to the business, and gain support through influential messaging.<\/span><\/li>\n
  13. Leverage vulnerability database sources to understand the weakness, probability and remediation options supplied by vendors as well as workarounds.\u00a0\u00a0<\/span><\/li>\n
  14. Join forces and provision security principles in architecture, infrastructure and code.\u00a0<\/span><\/li>\n
  15. Regularly research and learn new tactics, techniques and procedures (TTPs) in public and closed forums, and work with colleagues to assess risk and implement\/validate controls as necessary through the CI\/CD pipeline.<\/span><\/li>\n
  16. Partner with teams to define key performance indicators (KPIs) and metrics across business units.<\/span><\/li>\n
  17. Share lessons and takeaways from engagements to improve practice competencies.<\/span><\/li>\n
  18. Openly support the organization, management and executive leadership team always.<\/span><\/li>\n
  19. Perform other duties as assigned.<\/span><\/li>\n<\/ol>\n

    [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row custom_padding_last_edited=”off|desktop” _builder_version=”4.4.8″ custom_margin=”27px|auto||auto|false|false” custom_padding=”6px||0px||false|false”][et_pb_column type=”4_4″ _builder_version=”4.4.6″][et_pb_text _builder_version=”4.9.4″ header_5_font=”GTWalsheimPro-Medium||||||||” header_5_font_size=”18px” header_5_line_height=”1.33em” custom_margin=”||0px||false|false” custom_padding=”||0px||false|false”]<\/p>\n

    Skills and Qualifications<\/b><\/h5>\n