Welcome to Sansaone, a dynamic force in the realm of ICT talent acquisition. Born out of a passion for excellence and a vision for connecting outstanding professionals with forward-thinking organizations, we stand as a beacon for strategic recruitment solutions in the Information and Communication Technology sector. With a commitment to excellence and a passion for connecting exceptional professionals with innovative organizations, we are your strategic partner in building transformative teams.
We are seeking a DevSecOps Engineer to join our team and integrate security practices into the software development lifecycle.
As a DevSecOps Engineer, you will work closely with development, operations, and security teams to ensure that our applications and infrastructure are secure by design.
You will be responsible for automating security processes, monitoring security vulnerabilities, and implementing tools that help detect and remediate threats at all stages of the development pipeline. Responsibilities:
Develop, implement, and maintain security policies, practices, and automated processes to ensure security is embedded in our continuous integration and continuous delivery (CI/CD) pipeline.
Work with development teams to automate security testing, including static code analysis (SAST), dynamic analysis (DAST), software composition analysis (SCA), and infrastructure as code scanning.
Identify, assess, and mitigate security vulnerabilities within applications, environments, and cloud services, ensuring security patches are applied in a timely manner.
Continuously monitor the security posture of our systems and applications. Investigate potential security incidents, perform root cause analysis, and provide recommendations for remediation.
Work closely with developers, IT operations, and security teams to ensure alignment with security best practices and regulatory compliance. Technical Skills: