Tóm tắt công việc
We are seeking a talented DevSecOps Engineer to join our team. In this role, you'll bridge the gap between development, operations, and security, ensuring our systems and applications are robust, scalable, and secure from day one. You'll automate security checks, develop secure CI/CD pipelines, and foster a culture of collaboration and continuous improvement.
Responsibilities
Integrate security best practices into our DevOps pipelines and workflows.
Collaborate with
developers, operations, and security teams to design and implement secure infrastructure.
Monitor systems for security breaches, respond to incidents, and manage remediation.
Maintain and enhance infrastructure as code (IaC) using tools like Terraform, CloudFormation, Ansible, etc.
Implement and manage container security (Docker, Kubernetes).
Stay up-to-date with the latest security threats, vulnerabilities, and technology trends.
Educate and mentor teams on secure coding and DevSecOps principles.
Competitive salary and benefits.
Flexible work environment.
Opportunities for professional growth and training.
Collaborative team culture.
The chance to make a meaningful impact on our products and security posture.
Bachelor's degree in Computer Science, Information Security, or related field, or equivalent experience.
5+ years of experience in DevOps.
Hands-on experience with AWS Cloud.
Expertise in CI/CD tools (Jenkins, GitHub Actions, GitLab CI).
Having knowledge on scripting skills (Python, Bash, etc.).
Experience with containerization and orchestration (Docker, Kubernetes).
Familiarity with DevOps tool chains and practices (SonarQueue, Git).
Knowledge in Security like Server hardening, security tool chains for DevSecOps.
Knowledge of infrastructure as code (IaC).
Experience in vulnerability management, incident response.
Good at problem-solving, communication, and collaboration skills.
Proactive, detail-oriented, and continuously learning mindset
Preferred Qualifications
Professional certifications (AWS, Kubernetes).
Experience with monitoring/logging tools (ELK, Prometheus, Grafana).
Strong understanding of software development lifecycle (SDLC).
Knowledge in system compliance (like PCI/DSS, ISO 27001, GDPR, PII ISO/IEC 27018:2019...) is a plus