Technical/Functional skills

• The ideal candidate will have a strong understanding of security best practices and frameworks, such as OWASP and NIST.
• Proven expertise in designing and implementing CI/CD pipelines to support agile software development practices.
• Deep understanding of configuration management principles and tools for infrastructure automation.
• Excellent problem-solving and analytical abilities are necessary, along with the ability to perform thorough root cause analysis.
• Experience with infrastructure as code tools, like Terraform or Ansible, is essential.
• Experience with a broad range of toolsets including, Rational Team concert, uDeploy, Veracode, SonarQube, PPM, ALM & reporting tools.
• DevSecOps Specialist should have knowledge of secure coding practices and threat modelling
• Proven experience in automating deployment processes and workflows is crucial.
• Strong communication and collaboration skills are required to convey complex security concepts to nontechnical stakeholders.
• DevSecOps Specialist should be proactive and self-motivated with a keen attention to detail.
• DevSecOps Specialist should have the ability to work independently and as part of a team.
• Self-motivated and proactive in learning new technologies and improving deployment strategies.
• Ability to prioritize and manage multiple tasks in a dynamic, fast-paced environment.
• Commitment to continuous improvement and delivering high-quality solutions that meet business requirements.

Key Responsibilities

• The DevSecOps Specialist will develop, implement, and maintain automated deployment pipelines and workflows to streamline the deployment process.
• DevSecOps Specialist will integrate security tools and processes into the CI/CD pipeline for on-premises environments to ensure secure software delivery.
• DevSecOps Specialist will identify, manage, and mitigate security vulnerabilities in code, infrastructure, and third-party dependencies.
• DevSecOps Specialist will implement monitoring tools and frameworks to detect and respond to security incidents promptly.
• Collaboration with development, operations, and security teams is essential to ensure cohesive security practices and smooth project execution.
• DevSecOps Specialist will ensure all systems and software comply with relevant security standards and financial regulations, such as PCI-DSS, GDPR, and ISO 27001.
• DevSecOps Specialist will create and maintain comprehensive documentation for deployment processes, security practices, and tools.
• Providing ongoing operational support for deployed applications and systems, including troubleshooting and resolving issues, is a crucial part of this role.
• DevSecOps Specialist will participate in various projects, providing expertise in DevSecOps practices and supporting the project lifecycle from planning to deployment.
• DevSecOps Specialist will undertake any other tasks as assigned to support the team and organizational goals.