Seargin

Seargin is looking for a DevSecOps Consultant

• Position: DevSecOps Consultant
• Technologies: Cybersecurity, Docker, Chef, CI/CD
• Location: Remote
• Country: Poland
• Area: Project
• Form of employment: B2B
• Experience level: Senior

The main tasks for the DevSecOps Consultant will be:

• Executing security architecture reviews of applications in the design and production phases
• Finding security recommendations, potential threats, and attacks to applications systems through threat modeling and vulnerability evaluation
• Holding assessments of applications and platforms (web, cloud, mobile) with the usage of a range of manual and automated source code review techniques
• Providing integration of application security tools and processes in automated pipelines
• Collaborating with clients to analyze, assess, and improve the effectiveness of their application/platform/product security posture at procedural and technological levels from design to implementation
• Participating in market-facing actions. Using current technology and tools to improve the effectiveness of deliverables and services. Counseling and mentoring junior Cybersecurity team members
• Resolving and reviewing the resolution of security vulnerabilities as needed
• Enhancing secure coding practices, application security requirements, automation, training, and metrics
• Maintaining an active understanding of industry practices for secure software development
• Working with application development teams to refactor or create security solutions
• Controlling & Logging and Site Reliability

The Candidate should have:

• Familiarity with or experience in Agile Development Environment
• Good presentation skills
• Professional background in:
  • Assessing application security vulnerabilities with the usage of manual penetration testing and source code techniques or automated commercial SAST/DAST/IAST/SCA/OSA tools
  • Assessing application security programs for clients and developing key elements of the program as part of the improvement process and developing internal vulnerability evaluation and management processes
  • Performing security architecture/threat modeling
• Capability to learn and adjust to integrate application security to different CI/CD systems and apply automation as needed
• At least 2 years of professional background in Agile development, application security or DevOps role, with experience in the following technologies:
  • Containers (Docker, Kubernetes, etc.)
  • Infrastructure as code (Chef, Terraform, etc.)
  • Integration of Security testing tools into the pipeline
  • Developing enterprise applications or scripts for security testing (security as code)
  • Continuous integration (Jenkins etc.)
  • Defect tracking (Jira, Bugzilla, ServiceNow, etc.)
  • Source code management (GitLab, GitHub, BitBucket, etc.)
  • Cloud environment (AWS, Azure, GCP) and various Unix-like distributions
• Knowledge of:
  • Networking, infrastructure, and applications from a DevOps perspective with a concentration on security
  • Security monitoring, prevention, and control systems including anti-virus, web proxies, and security software
• Certifications relevant to the role
• Background in programming or scripting languages
• Expert knowledge of security control techniques and how they can be applied in a traditional IT environment as well as cloud-based systems
• Team-oriented, detail-oriented, efficient, and solution-oriented attitude
• Superb analytical and problem-solving skills
• Excellent communication and interpersonal skills
• Flexibility and ability to work independently and in a team
• Great English skills (written and spoken)

It would be a plus if the Candidate had:

• Educational background in Computer Science, Software Engineering or related discipline with minimum 3 years of overall experience
• Broad technical knowledge of:
  • Microservice oriented solutions
  • APIs
  • Azure AD
  • Common Cloud authentication patterns
• Certification in Cloud/DevOps (MS Azure/AWS/GCP)

The Candidate can expect:

• B2B Contract
• Challenging job in an international and multilingual environment
• Professional development
• Attractive and competitive compensation