Talent.com
Tawaran kerja ini tidak tersedia di negara anda.
DevSecOps Engineer

DevSecOps Engineer

Hytech Consulting Management Sdn BhdKuala Lumpur, Kuala Lumpur, Malaysia
9 jam yang lalu
Penerangan pekerjaan

Job Summary :

We are seeking a skilled and experienced DevSecOps Engineer to join our team. The ideal candidate will have a strong background in cloud infrastructure management, security, and IT operations. You will be responsible for embedding security practices into our cloud environment, ensuring that security is a core component throughout the software development lifecycle (SDLC). Your role will involve collaborating with development, operations, and security teams to automate security controls, audit compliance, and manage vulnerabilities.

Key Responsibilities :

  • Security Integration : Embed security best practices within cloud environment, ensuring that security checks are automated and integrated at every stage of the software development lifecycle.
  • Automation : Design and implement automated security detection / prevention measures and reports to identify and mitigate risks in cloud environment.
  • Collaboration : Work closely with development, IT operations, and security teams to create a culture of security awareness and shared responsibility.
  • Monitoring and Logging : Implement and maintain security monitoring, logging, and alerting tools to detect and respond to security incidents in real-time.
  • Compliance : Ensure compliance with industry standards and regulations (e.g., GDPR, HIPAA, PCI-DSS) by integrating relevant security controls and conducting regular audits.
  • Risk Assessment : Perform threat modeling, risk assessments, and vulnerability analysis to proactively identify and address potential security threats.
  • Incident Response : Develop and maintain incident response plans, and collaborate with relevant teams to respond to and mitigate security incidents.
  • Continuous Improvement : Continuously evaluate and improve security practices within the DevOps environment, staying up-to-date with the latest security trends, tools, and techniques.
  • Documentation : Maintain clear and comprehensive documentation of security policies, procedures, and configurations.

Qualifications :

  • Education : Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent experience).
  • Experience :

  • 3+ years of experience in Cloud Infrastructure Management or DevOps, with a focus on managing cloud infrastructure and integrating security into AWS cloud environments.
  • Experience with AWS cloud platforms and securing cloud-native applications.
  • Strong understanding of AWS security product like Security Hub, GuardDuty and others.
  • Technical Skills :

  • Proficiency in managing AWS Cloud Infrastructure, especially AWS Control Tower, AWS Organization, AWS Landing Zone, AWS IAM Identity Center, AWS Transit Gateway and AWS Security Product.
  • Experience with CI / CD tools (Jenkins, GitLab CI, CircleCI, etc.) and security tools (SonarQube, OWASP ZAP, Snyk, etc.) and its workflow.
  • Familiarity with containerization (Docker, Kubernetes) and securing containerized applications.
  • Knowledge of infrastructure-as-code (IaC) tools (Terraform, Ansible) and related security considerations.
  • Experience with vulnerability management tools (Nessus, Qualys) and techniques.
  • Soft Skills :

  • Strong communication and collaboration skills, with the ability to work effectively in a cross-functional team.
  • Problem-solving mindset with a proactive approach to identifying and addressing security challenges.
  • Ability to stay current with emerging security threats and technologies.
  • Preferred Qualifications :

  • Certifications such as AWS Solution Architect (Associate / Professional) or equivalent.
  • Experience in a regulated environment (e.g., healthcare, finance) with knowledge of specific compliance requirements.
  • Familiarity with agile development methodologies and practices.
  • Buat amaran kerja untuk carian ini

    Engineer • Kuala Lumpur, Kuala Lumpur, Malaysia