DevSecOps EngineerfreeC's Client

The Engineer will participate in projects implementing DevSecOps solutions for large enterprise clients. The scope of work includes:

Advise and implement solutions for Secret Management (e.g., Vault, CyberArk, etc.).
Advise and implement solutions for Cloud Native Application Protection Platforms (CNAPP) (e.g., Aquasec, Prisma, etc.).
Directly participate in consulting and implementing DevSecOps solutions for clients.
Assist clients in remediating vulnerabilities in code detected by Application Security tools, as well as vulnerabilities identified by CNAPP tools.
Advise and implement Observability solutions (Monitoring, Logging, Tracing, etc.) for clients.
Support clients in assessing and classifying (triaging) vulnerabilities and security risks discovered by the tools.
Advise and implement solutions for Application Security such as SCA, SAST, DAST (e.g., Synopsys Coverity, Sonatype Lifecycle, Synopsys Black Duck, Checkmarx, Sonarqube, etc.).

Job Requirements

Basic English communication skills, with the ability to research, read, understand, and write technical documents in English.
Advantageous if experienced in implementing security on the Kubernetes platform;
Graduated from university with a major in Information Technology or related fields;
Advantageous if proficient in programming languages such as Java, JavaScript, Python, Golang, etc.;
At least 3 years of experience working in the Security field;
Strong understanding of security frameworks such as OWASP, CIS Benchmarks, or Zero Trust;
Advantageous if experienced in working with systems like SIEM, IDS/IPS;
Advantageous if experienced in working with Infrastructure as Code and Configuration as Code tools like Terraform, Ansible, etc.;
Advantageous if having good knowledge of secure software development processes, including DevSecOps tools such as SCA, SAST, DAST, etc.;

Work schedule: Monday to Friday (weekends and public holidays off).
Full labor law benefits, including insurance.
Supportive and development- focused work environment emphasizing respect, fairness, integrity, professionalism, and care.
Personalized health care benefits:
Opportunities to attend technology conferences and specialized training.
Internal training programs and development consultancy.
Annual health insurance packages.
Company- sponsored travel and team- building activities.
Holiday and festival bonuses.
Periodic health checks tailored to individual needs.

Cập nhật gần nhất lúc: 2024-12-23 23:25:02