DevSecOps Specialist

Introduction:
As a DevSecOps Specialist, you will play a crucial role in bridging the gap between development, operations, and security, ensuring the secure deployment of applications in the cloud environment. You will be instrumental in integrating security at every phase of the software development lifecycle, making security a core component of our operational processes.

Responsibilities:

• Implement and manage continuous integration/continuous deployment (CI/CD) systems using tools like Jenkins, Git, Docker, Kubernetes, Ansible, and Terraform.
• Develop and enforce best practices for securing the software development and deployment lifecycle.
• Design, build, and maintain secure cloud environments across multiple providers (AWS, Azure, Google Cloud) with a focus on security configurations and management.
• Develop automation scripts and tools to integrate security into CI/CD pipelines using Python, Bash, or other programming languages.
• Conduct vulnerability assessments and security testing to identify and mitigate risks before production releases.
• Collaborate with development teams to advocate secure coding practices and to ensure security measures are incorporated into the DevOps workflows.
• Stay updated with the latest security threats, countermeasures, practices, and industry trends.
• Develop and maintain documentation related to DevSecOps processes, security procedures, and configurations.

Education and Experience:

• A degree in Information Technology, Cybersecurity, Computer Science, or a related field.
• At least 2-3 years of experience in DevSecOps or similar roles, with a proven track record of developing secure and efficient CI/CD pipelines.

Technical Skills:

• Proficiency in DevOps Tools: Knowledge and experience with Jenkins, Git, Docker, Kubernetes, Ansible, Terraform, and similar tools.
• Understanding of Cybersecurity Principles: Familiarity with best practices for securing development and deployment stages.
• Cloud Platforms Experience: Competence in using cloud services such as AWS, Azure, Google Cloud, including security configuration and management.
• Scripting and Programming Skills: Proficiency in programming languages like Python, Bash for automation tasks, and security integrations.

Security Knowledge and Skills:

• Application of Secure Coding Practices: Ability to conduct code reviews for vulnerabilities and implement protection methods.
• Experience with Security Tools: Proficiency in dynamic and static code analysis tools, vulnerability management tools.
• Understanding of Security Standards and Compliance: Knowledge of data security standards such as GDPR, ISO 27001.

Personal Qualities:

• Communication Skills: Ability to effectively communicate with development teams, operational teams, and management.
• Analytical Thinking: Ability to analyze and solve complex security problems.
• Proactivity and Initiative: Willingness to continuously learn and apply new technologies in the field of security and DevOps.

Job Type: Full-time

Application Question(s):

• What is your notice period?
• What is your expected monthly salary? (SAR)

Application Deadline: 30/04/2024