Vị trí công việc này hiện tại đã hết hạn nộp hồ sơ, bạn có thể tham khảo thêm một số công việc liên quan phía dưới
Mô tả công việc
Tóm tắt công việc
is the leading fashion and lifestyle destination in growth markets across LATAM, SEA and ANZ. From our people to our customers and partners, we exist to empower everyone to express their true selves through fashion. Our three e-commerce platforms: Dafiti, ZALORA and THE ICONIC connect an assortment of international, local and own brands to over 800 million consumers from diverse cultures and lifestyles. GFG's platforms provide seamless and inspiring customer experiences from discovery to delivery, powered by art & science that is infused with unparalleled local knowledge. As part of the Group's vision is to be the #1 online destination for fashion & lifestyle in growth markets, we are committed to doing this responsibly by being people and planet positive across everything we do.
THE TEAM
At GFG, Technology is core to long-term success and is a crucial enabler of a great Customer Experience. We are a mix of experts in fashion, logistics, data analytics, marketing, and design, guided by business consultants and tech geniuses - everyone contributes to the success of GFG.
We're looking for a DevSecOps Engineer to work closely with team THE ICONIC in Australia.
You will be a part of THE ICONIC's growing Security team, and will be responsible for helping continuously improve the overall security landscape for THE ICONIC. You will be responsible for uplifting THE ICONIC's teams by bringing security seamlessly into their pipeline. You will work closely with our stakeholders to enhance all aspects of THE ICONICs cybersecurity practices as they work to implement the changes you recommend.
SCOPE OF ROLE
Participate in security audits on cloud infrastructure environments
Create baseline of THE ICONIC's security status
Partner with engineering and security teams to add security to their delivery pipelines
Design and develop automation solutions for application build and deployment
Actively document all activities and participate in peer review for code and documentation
Refine and enhance the edge-based security tools
Drive the automated security testing into all CI/CD pipelines
Security monitoring, incident response and reporting
Annual Leave: 15 days
Sick leave/Mental Health Days: 30 days.
Occasion leave: 1 day.
13th month salary.
Annual bonus: up to 3 months based salary (depends on company performance).
Home Workspace support: up to 7mil/person.
Medical benefits: Social insurance, medical insurance & AON insurance.
Macbook is provided.
Support for English class.
Support Gym membership.
Additionally, we offer a flat hierarchy, a fun and flexible work environment.
Yêu cầu
Experience in at least one Public Cloud (AWS or Azure or GCP)
Experience integrating crucial security tasks into CI/CD pipelines.
Experience working with microservices and serverless tech architectures
Experience with Kubernetes/Docker
Ways to stand out from the crowd
Can perform risk analysis (e.g., threat, vulnerability, and probability of occurrence) whenever an application or system undergoes a major change.
Experience performing static and dynamic code analysis (SAST/DSAT)
Experience building/managing continuous compliance monitoring solutions.
Experience designing/maintaining SIEM solutions
Experience with secret management design and implementation
Exposure to Incident Management approaches
Background coding with Java, Python or [protected info]
Experience and familiarity with NIST, PCI, et. al. frameworks
Thông tin khác
DevSecOps
Python
AWS
Java
NodeJS
MS Azure
SIEM
Kubernetes
Microservices
GCP
PCI
Serverless
CI/CD
SAST
Thông tin chung
- Ngày hết hạn: 20/03/2025
- Thu nhập: Thỏa Thuận
