Position: DevSecOps
Category: DevOps
English level: fluent
Years of experience: 10

- Successfully integrated security tools that were able to identify high number of security issues and prevented potential breaches.
- Performed security scans
- Improved overall posture of the product.
- Help educate members of other departments about potential security issues and ways to prevent those.
—> Part-time only

—> Position:  DevSecOps / Application Security Engineer

—> Location: Tampa, Florida or remote

10+ years of experience working for Big Companies as well as startups in US and Canada

OSCP, CEH, ISTQB Certified

SDLC Security and DevSecOps Implementation: Help clients integrate security practices into their Software Development Life Cycle (SDLC) by incorporating SCA, SAST, DAST, and other security tools such as SonarQube, Tenable, and Burp Suite Enterprise, Orca, Snyk. Provide expertise in implementing DevSecOps by setting up security testing, automating vulnerability scans, and including security checks in the CI/CD pipelines using tools like Jenkins, GitHub Actions.

Cloud and Infrastructure Security Consulting: Offer guidance on securing cloud infrastructure, particularly in AWS environments, and assist clients in setting up security tools using services like AWS Control Tower and Security Hub. Provide expertise in infrastructure as code (IAC) with Terraform.

Security Assessments and Penetration Testing: Perform Web, API, and Network security assessments, leveraging your hands-on experience in these areas. Offer vulnerability assessments, penetration testing, and security audits using various tools and techniques.
Problems I can help to solve:
- Integrate SCA, SAST, DAST and other security tools into CI/CD pipelines
- Perform security audits (AWS cloud) 
- Conduct vulnerability assessments
- Select necessary security tools
- Build vulnerability management process

Please, no legacy! 

Perfect project: Cloud application running on AWS.