Position: DevSecOps Engineer
Company: That'sIT
Category: DevOps
Experience required: 2y
English level: upper
Published: 2021-12-01T00:00:00+02:00

They do so by creating trusted comparison websites that enable consumers to easily compare products and services online and form high-value relationships with the brands they choose. The partner brands, some of which are among the most prominent websites worldwide, utilize this platform to maximize their online presence.

As a DevSecOps Engineer, your primary challenge will be to manage the security of our global cloud infrastructure, taking the lead on the protection, guidance, designing, automation, and support of the cloud security operations. You will also contribute to other security domains and initiatives such as Incident Response, Security Monitoring, and Risk Management. 
You will work with our DevOps group to ensure that we maintain both high-security standards and high availability for production. 

**Responsibilities:**
- develop the security of the Cloud and Monitoring environments;
 - guide and design a secure infrastructure;
- manage and maintain existing security systems and tools;
- manage Secure development tools (SAST, DAST).

**Requirements:**
- at least 2 years in a DevSecOps or DevOps role or similar role, in which you designed cloud environments - preferably AWS;
- at least 2 years experience in coding and scripting (Python/Ruby/Go/Bash) for promoting automation in cloud environments;
- proven knowledge of core security networking concepts like TLS, SSH, DNS, Firewalls, etc.;
- solid knowledge of information security principles and practices;
- strong familiarity with log shipping, monitoring, and AWS;
- solid knowledge of web infrastructure;
- an experience of CI/CD and development pipeline technologies;
- experience with containerized environments and microservices, and in particular with Docker/Kubernetes;
- excellent English.

**Will be a plus:**
- cloud Security Certifications like AWS Certified Security Specialty;
- understanding of regulatory compliance and how it relates to security and privacy.