Position: DevSecOps Engineer
Company: SoftServe
Experience required: 3y
English level: upper

WE ARE

Our format of the job is a consultancy for different projects, not tied to specific projects, technologies, timelines. We do DevSecOps for everything.
We have developed a customer-trusted relationship and a strong partnership with Microsoft, Amazon, and Google. Being a part of the international community, we participate in major worldwide events (Google next, Google cloud meetups, Microsoft Build, Microsoft Ignite, etc.). Size of companies – from tech Startups to Forbes 500 Enterprises.

YOU ARE

To the best of your advantage, you should possess:
• Hands-on experience with at least one of the leading cloud provider (AWS, GCP, Azure) services (mandatory: architecture design experience and/or implementation of security controls) and strong DevOps background (cloud infrastructure planning, automation, deployment, and configuration of cloud resources)
• Understanding of concepts of a Software development process, cloud security toolset and processes, and corresponding assessment methodologies and frameworks (CIS benchmarks, CSA CCM, etc.)
• Expected to be able to follow and understand a defined security process, train other team members, and contribute to process improvement
• Scripting/software development experience is a plus (Python, Ruby, Go, etc.)
• Understanding of at least one compliance/regulation such as ISO 2700x/PCI DSS/HIPAA/HITRUST/GDPR/SOX/FedRAMP

Nice to have:
• Nice to have: AWS, GCP, Azure specialization certifications (intermediate class and above)
• Professional Security Certifications such as CCSK/SSCP

YOU WANT TO WORK WITH

• The Cloud Security Engineer is responsible for providing technical leadership and subject matter expertise in AWS, GCP, Azure environments on enterprise-scale, with thorough knowledge of cloud engineering and a good understanding of security best practices standards, compliance, and regulations
• Various cloud security domains such as Cloud Security Posture Management, Identity, and Access Management; Data Protection and its application; Data Loss Prevention; Automatic Incident Response; Business Continuity, Disaster Recovery; DevSecOps; Microservice Security, and custom scripting around it
• Planing, design, and implementation of security solutions for multi-cloud systems and workloads
• Adjacent teams (engineering, infrastructure, development, database, operations, etc.)