Position: Security engineer
Company: GlobalLogic
Experience required: 3y
English level: intermediate

**Job Description**
- Bachelor or Master degree in Security, Mathematics or Computer Science;
- Prior experience (3-5 years) in a DevSecOps or Security Engineer in Production Engineering or related position;
- Ability to work with APIs and Plugins to integrate security tools into established CI/CD pipelines (i.e., OWASP ZAP, JFrog Xray, Anchore, and SAST tools, etc.);
- Experience working with Developers, DevOps, and Engineering teams in a dynamic environment to promote/implement the DevSecOps program throughout the organization;
- Experience coordinating and performing vulnerability assessments through automated and manual tools (Nessus, nmap, sqlmap, etc.);
- Familiarity with core DevOps tools (Jenkins build server, repositories, etc.) and experience with Kubernetes;
- Ability to review and analyze reports to identify security risks to the application and determine any reported vulnerabilities that are false positives;
- Capability to prepare vulnerability and risk management reports for management;
- Proficiency in Java Programming and Bash, Python, or other scripting languages;
- Familiarity with Information Security frameworks/standards (i.e., OWASP, CIS, NIST, RFC2196, etc.);
- Comprehension in the security areas of Penetration Testing, Security Assessment, and Vulnerability Assessment;
- Experience configuring, implementing, and leveraging computer security and networking diagnostic/monitoring tools;
- Knowledge of Linux information security functions (patch management, authentication, privileges, filesystem permissions, iptables, SSL, SSH, etc.).

**Job Responsibilities**
- Provide application security expertise to customer project delivery teams throughout the Secure Software Development Lifecycle (SSDLC);
- Discovery vulnerabilities and provide recommendations to developers for remediation;
- Perform security audits on internal projects;
- Perform vulnerability assessment;
- Automate vulnerability management and assessment processes.

**Department/Project Description**
The customer is a leading multinational provider of the telecommunication technologies and services.
The product is a network configuration and inventory management system designed for the telecommunications industry. This is a platform for planning, designing, rearranging and documenting the inventory of complex communication services and networks. It provides a comprehensive view of your services, resources, and networks and the relationships among them. The system enables the communication carriers to manage their network inventory, track current assets, develop complex configurations, and schedule future resources for wireless, wireline, voice-based or databased services.