Data Engineer
Core
Review and evaluate results from automated security scans (SAST, SCA, vulnerability, and cloud security scans) and consolidate reporting of security findings across applications and systems.
Role type
Senior Information Security Management Specialist (via careerplan.io/jobs/11949-17278635-S-data-engineer-at-rail-cargo-austria-aktiengesellschaft)
Builds
DevSecOps mechanisms along CI/CD pipelines
Domain
Information Security, IT Compliance, IT Risk Management
Deliverable
dashboards & analysis
Required skills
Security standards knowledge, regulatory compliance (ISO 27001, NIS2), audit and assessment experience, agile software development knowledge, SAST/SCA/DevSecOps interpretation, cloud security or AI in security interest
Preferred skills
CISSP certification, experience with penetration tests, threat modeling, application reviews
Technologies
SAST, SCA, DevSecOps, CI/CD pipelines
Responsibilities
Review and evaluate results from automated security scans, consolidate reporting of security findings, support solution architects in building DevSecOps mechanisms, advise on Secure-by-Design and Secure-Coding principles, create and maintain MIKE-specific security documentation, derive policies for playbooks and guidelines, plan and execute individual security measures, serve as an interface to corporate IT security and external partners