What you will do​

​

• Design and Implement Secure DevOps Practices: Collaborate with development and operations teams to design, implement, and maintain secure DevOps practices and processes.

• Continuous Integration/Continuous Deployment (CI/CD): Develop and maintain CI/CD pipelines to automate software build, test, and deployment processes while integrating security controls at each stage.

• Security Tooling Integration: Integrate security tools and technologies into the CI/CD pipeline to automate security testing, vulnerability scanning, and compliance checks.

• Infrastructure as Code (IaC): Implement infrastructure as code practices using tools like Terraform/Terragrunt to automate the provisioning and management of infrastructure resources securely.

• Security Testing and Auditing: Conduct security testing, code reviews, and audits to identify and remediate security vulnerabilities in applications, infrastructure, and configurations.

• Incident Response and Monitoring: Develop and maintain monitoring and incident response processes to detect and respond to security incidents in a timely manner.

• Security Compliance: Ensure compliance with relevant security standards, regulations, and best practices (e.g., ISO 27001, SOC) by implementing appropriate security controls and measures.

• Security Awareness and Training: Provide guidance and training to development and operations teams on secure coding practices, DevSecOps principles, and emerging security threats.

• Documentation and Reporting: Document security processes, procedures, and configurations, and generate reports on security metrics, compliance status, and incidents.

• System Availability Monitoring and Reporting Implement automated tools and processes to monitor the availability and performance of systems, applications, and infrastructure. Generate reports on system uptime, response times, and other key performance indicators to ensure reliability and scalability. Collaborate with the operations team to proactively address any issues and optimize system performance.

• Stay Updated: Stay abreast of the latest security trends, vulnerabilities, and best practices in DevSecOps and proactively recommend and implement improvements.

​

What we are looking for

​

• Bachelor’s degree in Computer Science, Information Security, or related field.

• Up to 3-year work experience in DevOps, Security, SRE, or related fields is preferred

• Familiarity with public cloud, including AWS and Google Cloud Platform

• Programming knowledge in NodeJS, Python, Shell, or similar technology is preferred

• Experience with containerized technologies including Docker and Kubernates

• Strong understanding of DevOps principles and practices

• Familiarity with security testing tools and techniques

​

Interested in joining our team, please send your CV and your portfolio (if any) with following email subject "Joining Abacus Family: DevSecOps Engineer Officer" to [email protected]

​