DevSecOps Engineer
Job Description
Are you a passionate DevSecOps Engineer with a strong background in CI/CD pipelines and security automation? We’re looking for an experienced professional to join our team, where you will play a critical role in integrating security practices into the software development lifecycle. You will have the opportunity to work with cutting-edge technologies, implementing and automating processes to ensure secure and efficient software delivery.
Responsibilities:
- Design, implement, and optimize CI/CD pipelines to streamline software delivery, ensuring quick and secure integration, delivery, and deployment.
- Automate software build, test, and deployment processes to enhance development efficiency and speed while ensuring security best practices.
- Conduct automated code inspections and security reviews using tools like SonarQube and Dependency Tracker to ensure adherence to coding standards and security policies.
- Identify vulnerabilities early in the development lifecycle, preventing issues from reaching production.
- Manage and optimize on-premises Microsoft Azure DevOps Server to support continuous integration, delivery, and deployment across the organization.
- Maintain and enhance DevOps infrastructure, ensuring it meets the needs of development and security teams.
- Automate security practices in web-based solutions through CI/CD pipelines, ensuring secure code is integrated into all stages of the development lifecycle.
- Ensure seamless integration with Microsoft development tools, .NET frameworks, and C# to enhance security without compromising on development speed.
- Work closely with developers to enforce secure coding practices and integrate security into the development process.
- Assist in reviewing and refining security guidelines and procedures to improve security posture.
Technical Expertise:
- At least 3 years of proven experience managing the Software Development Lifecycle (SDLC) and implementing CI/CD pipelines.
- Strong experience with SonarQube and Dependency Tracker for automated code inspections and security reviews.
- Proficiency in managing Microsoft Azure DevOps Server (on-premises) for continuous integration and deployment.
- Solid technical background in Microsoft development tools, .NET frameworks, and C#.
- In-depth understanding of database design and concepts, as well as major software architectures for web-based solutions.
Security and Automation Skills:
- Ability to automate security practices using CI/CD pipelines for web-based solutions.
- Familiarity with integrating security tools into Microsoft development environments and ensuring security compliance throughout the development lifecycle.
Hiring Team Member
