As a DevSecOps Engineer you’d work on securing our platform with industry best practice using cloud native technologies and actively seek out modern, automated solutions to the problems encountered. You’d work with the development teams to proactively improve our security posture through best in class tooling and modern processes while still keeping our efficiency.

•          Provide an enterprise-grade security as a service
•          Set security posture objectives while engaging with and supporting the development teams
•          Evaluate and roll out new security tooling and automated process
•          Build and run red team drills to evaluate security posture
•          Assess penetration testing results and perform hands-on remediation

Required

•          Excellent practical knowledge of the application of defense in depth of a modern web app
•          Information security experience with certifications preferable, e.g. CCSP, CISSP, CISM
•          Excellent knowledge of proven security principles, for example least privilege, failing securely and zero trust networks
•          Knowledge of technology best practices for building a modern automated platform
•          Self-starter, capable of working without direction and able to deliver projects from scratch
•          Container Management and container orchestration experience – Docker, Kubernetes
•          Security experience with JVM based languages such as Java/Scala/Kotlin
•          Public cloud management experience – AWS with Hashicorp Terraform
•          Strong knowledge of Linux/UNIX
•          Strong understanding and practice Agile/Lean projects SCRUM, KANBAN etc.
•          Practical knowledge with Git flow, Trunk and GitHub flow branching strategies
•          Strong English communication skills

Desirable

Monitoring tools Elastic Stack, Prometheus, Grafana

Relevant AWS certifications, e.g. AWS Solutions Architect