Position: Security DevOps Engineer
Company: Omilia Natural Language Solutions Ltd
Experience required: 3y
English level: upper

Description

This is a great opportunity for developing a high level career. The candidates will work in a highly motivating environment, which encourages team spirit, cooperation and continuous learning, as a member of a very competent team.
The SecDevOps engineer will work closely with the Engineering (Product), DevOps, and Information Security & Data Protection teams at Omilia to build and maintain cloud security posture and cloud security infrastructure and software for security operations, cloud security auditing, and red team activities.

The right candidate will love being hands on with the latest security tools and technologies. They must possess a strong passion for security and a hunger for learning. Ultimately, we want this person to become an expert in the security profession, an open source contributor, or a leader in the field.



The responsibilities of the Security DevOps Engineer include:

Working with Information Security & Data Protection teams and Product Owners to achieve alignment between information security and business change objectives.
Architect, design and provide implementation patterns of security controls throughout solution delivery lifecycle.
Designing and developing generic security patterns and guidelines to enable applications stay compliant - inject security practices in the CI/CD pipelines to introduce security measures from early stages of the software development workflow.
Evaluating and on-boarding security tools such as RASP, WAF, SAST, vulnerability and open source scanning into the Security DevOps life cycle for multiple tech stacks.
Contribute and help the teams apply modern security measures and safeguard existing cloud resources, enabling among others the appropriate WAF rules, DDoS protection and Hardening.
Contributing features to internally developed Information Security tools, and integrate those tools into the Security DevOps pipelines.
Driving continuous improvement to both the Security DevOps pipelines and processes, and to the Information Security tools, services, and processes.
Requirements
The SecDevOps Engineer background should include:

Experience working in an agile, DevOps/SecDevOps environment.
Bachelors or Masters in Computer Science or other related engineering fields.
A minimum of 3 years of experience working in a Software Engineering role.
A minimum of 2 years of experience working in a Security role handling on premise and cloud infrastructures.
A minimum of 3 years of experience with security testing at scale by building and implementing static and dynamic analysis tools, integrating security into CI/CD workflows for everyday deployments.
Experience with Kubernetes, Azure, AWS, Ansible, Docker, and Kafka.
Experience converting feedback from security analysis tools into infrastructure improvements.



TEAM CONTRIBUTION

Meet regularly with the line manager to review progress.
Manage issue resolution and critically escalate.
Work effectively with other teams, units, and departments.
Manage issues with clarity and ensure effective information flow and team working.
Support other organization’s priority activities, when necessary.
Act as an Omilia ambassador