DevSecOps

Collaborate with team members on continuous improvement to both the Security DevOps pipelines and processes, and to the Information Security tools, services, and processes.
Ensure applications stay compliant by integrating application and DevSecOps processes and CI/CD pipelines from early stages of the lifecycle.
Understand technical and business requirements to develop tactical and strategic roadmaps to address and implement Secure SDLC controls (Data Privacy, SAST, DAST, etc).
Provide security techniques and expertise to ensure the infrastructure and software services meet specific customer security requirements/certifications
Collaborate with members of the team and product owners to solve operational issues and develop enhancements such as automation.

Experience with vulnerability scanners, including Tenable Nessus, Qualys, ...
Bachelor Degree in information security, computer science.
Patterns/ Principles- Blue/Green Deployment- Canary Release, Feature Flipping
Good knowledge of containers and orchestration platforms. Need to know how to create, build, deploy and manage containers in development and production environments- Docker, Kubernetes.
Experience working in an Agile, DevOps/SecDevOps environment.
IDE: Eclipse, Visual Studio
Experience with security testing at scale by building and implementing static and dynamic analysis tools, integrating security into CI/CD workflows for everyday deployments.
Good knowledge of threat modeling, risk assessment techniques, code reviews, and with the latest security best practices
Experience with static code analysis for software or infrastructure as code, including SonarQube,Terraform.
Experience with Authentication and Authorization solutions.
Experience working in software engineering role.
Experience, Knowledge of API Security
Understanding of secure software development practices- AppSec- Security and/or regulatory experience desired, OWASP 10 and Web Application Security, Mobile Application Security, API Security.
Experience in developing integration APIs and WebServices (REST/SOAP), API Development
Experience working in a Security role handling on premise and cloud infrastructures.
Knowledge of Logging & Monitoring tools: ELK, Grafana, DataDog, Prometheus.
Require good knowledge of CI/CD tools- Knowledge of GitLab CI/CD, Seleneoid, Jmeter, SoapUI, Junit
Require good knowledge in automatic configuration management tool- Knowledge of Ansible, Terraform
Public Cloud services knowledge: AWS, Digital Ocean.
Require good knowledge of automated security tools- SAST, SCA, DAST, IAST

• Insurance after 2 months of probation, PVI insurance for some levels
• Lunch allowance and parking free
• Team building, company trip
• Working in a friendly and professional environment
• Training in work and fast- track your career path
• 13th month salary, bonus project, gifts (New Year, birthday, 8/3, 1/6, 20/10..)

Cập nhật gần nhất lúc: 2025-09-15 14:25:03