Development Security Operations (DevSecOps) Engineer
Core
Implement and maintain secure software development practices, integrate security into the SDLC, and manage security automation and compliance for software delivery.
Role type
Senior DevSecOps Engineer
Builds
Secure CI/CD pipelines, container images, and application deployments for live entertainment and events platforms.
Domain
Software Security / Cloud Infrastructure
Required skills
CI/CD pipeline management, cloud environment configuration, secure coding practices, risk assessment, security policy development, vendor relationship management, incident response, disaster recovery planning, real-time monitoring and analytics, programming (JavaScript, Ruby, Python, PHP, C#), Git version control
Preferred skills
Team lead experience, knowledge of SSDLC frameworks (OWASP, NIST, ISO 27001, CIS), familiarity with security tools (Orca Security, Sysdig, Codacy, Azure Log Analytics, Splunk, Datadog)
Technologies
GitHub Actions, Azure DevOps, AWS CodePipeline, Jenkins, Azure Log Analytics, Google Cloud Operations, AWS CloudWatch, Sentry, Splunk, Datadog, Orca Security, Sysdig, Codacy
Responsibilities
Perform code reviews and collaborate with development teams to address security vulnerabilities; Review and enhance CI/CD pipelines; Conduct risk assessments and develop risk treatment plans; Work with cross-functional teams to define security requirements and standards; Manage vendor relations for security implementations; Assist in audits, incident response, and compliance processes; Define requirements and facilitate Disaster Recovery tests.
Seniority
Senior, hands-on IC with team lead experience