Job Description
Are you thrilled about DevOps and security? Then we have an exciting opportunity for you at Danske Bank.
The Application Security team under SRC (Security, Resilience, and Controls) supports the organisation in developing secure software by providing requirements, guidance, and tooling. We are looking for a security engineer with an interest in DevSecOps and application security and the skills to match.
Our mission is to support our internal developer community with tools and processes that will help them develop secure software by integrating security into their CI/CD pipelines.
As development teams move quickly, automation becomes crucial for the security team to keep pace. We aim to enable security at the speed of DevOps, focusing on more security and less paperwork.
Your Responsibilities
In this role, you will contribute to the development and maintenance of secure development tools and practices. Your main focus will be the design and implementation of automated security controls embedded into CI/CD pipelines. You will also contribute to:
- Drive automation and transformation of time-consuming and routine-based security processes
- Data modelling towards security compliance data to deliver metrics for DevSecOps space
- Working to enable, support, and promote DevSecOps processes
- Building resilient, reliable, and highly available security services to support our development teams
A great match
- 5-8 years of solid experience with C#/.NET development, REST APIs, microservices, Microsoft SQL, dependency injection, LINQ queries, and entity framework
- Knowledge of scripting in Bash, PowerShell, or Python
- Experience with DevOps tools and processes, build automation, and orchestration tools. Specifically, knowledge of CI tools like GitHub (Actions) and Azure DevOps
- Knowledge of Application Security, DevSecOps, and code-scanning tools like SAST, DAST, SCA, and secret scanning tools
- Experience with the management of open source dependencies like NuGet, NPM, or Maven
- Experience with the remediation processes for vulnerabilities
- Knowledge of container technology such as Docker and Kubernetes
We offer
We have a flexible work schedule and hybrid working, allowing you to work from home 1-2 days per week. We offer a forward-thinking and collaborative environment with great growth opportunities. You can benefit from our offers such as: Canteen, a highly attractive benefits package offering health insurance, pension, 6 weeks of vacation, 5 care days and more.
If you have any questions about the job, please reach out to Povilas Murinas, Head of Application Security, at
[email protected] or Martin Brinch Sørensen, Chief Security Engineer, at
[email protected] . We are processing applications on a continuous basis so please apply as soon as possible.
We are looking forward to receiving your application!