DevSecOps Developer

About the job

Job Responsibilities

• Experience with OWASP Testing Guide v3 / 4 and OWASP TOP 10

• An understanding of programming languages such as Ruby, Perl, Java, Python and PHP.

• Strong teamwork and communication skills.

• Knowledge of threat modelling and risk assessment techniques.

• Up-to-date knowledge of cybersecurity threats, current best practices and latest software.

• Experience of Puppet, Chef, ThreatModeler, Checkmarx, Immunio and Aqua is plus

• Experience with Automation in testing or orchestration Selenium, Maven, Ant, Msbuild, Npm, Yarn, Jenkins, Team City, etc..

• Knowledge of conducting security checks (static and dynamic code analysis, vulnerability analysis in applications and penetration tests, security component analysis)

• Experience of virtualization and container technologies (Docker, Kubernetes, OpenShift, …) and integration of application security testing into our CI/CD pipeline

• Knowledge of securing APIs, source code reviews and applied cryptography

• Knowledge of the DevOps culture and principles

Qualification:

• Master Degree in Computer Science, Telecommunications or Information Security

• Certifications such as CSSLP, CISSP, CISA, etc. are preferred

• Certifications from pentesting vendors (OSCP, CEH,…) are preferred

• SAST & DAST tools related education and certificates are plus

• Excellent verbal and written communication skills, such as incident reporting, meeting facilitation, presentation and documentation