DevSecOps Manager

DevSecOps Manager (CM)

Job Description

We are looking for a skilled professional to join our Information Security Team as a DevSecOps Manager. The DevSecOps Manager leads a DevSecOps engineering function that focuses on the security of platforms and products through the design, build and operational lifecycle.

Roles & Responsibilities

· Responsible for strategic planning and implementing the DevSecOps roadmap. Review all product and platform designs, provide security requirements and act as a sign off point to ensure optimized security posture.

· Work closely with the product and platform delivery teams to ensure guardrails are well defined & are being followed to maintain a DevSecOps mindset throughout the development process.

· Implement Security tools in DevOps CI/CD (Continuous integration/Continuous Delivery) pipeline

· Publish security standards and best practices for Developer's teams.

· Enable automated security scanning process to identify the known vulnerabilities in source code, Open-source library, and configuration.

· Provide technical leadership and direction in the DevSecOps domain.

· Defining testing strategies and frameworks. Assess the security, quality, compliance of products, toolsets and processes.

· Design & implement secure software development life cycle solutions using security tools

· Define gating process metrics for security and implement in DevSecOps.

· Monthly Dashboard Reporting for Leadership.

· Configure Cloud Security Tools/Systems in a CI/CD Pipelines.

· Understand the Security Requirements & Implement the new DecSecOps process.

· Integrate, Monitor and Improve Cloud Security controls via DevSecOps process in existing DevOps process.

· Perform assessment and help to mitigate Security findings and implement improvement Security measures.

· Work in support of the Senior DevSecOps Engineer enhancing the DevSecOps security.

· Prepare and provide necessary metrics, detailed reports, artifacts, executive summary and dashboard to leadership on a regular frequency.

· Implementing Security scanning into Jenkins, Code Pipeline, and DevOps workflows.

· Troubleshoot DevSecOps pipeline implementation issue and support for successful deployment.

· Implement DevSecOps with multiple agile teams across various platforms, environments, and instances.

· Implement Automated DevSecOps template-based solutions for cloud environments.

· Employ infrastructure as code to increase automation, scalability, and reliability.

· Build and maintain a set of tools that enable developers to self-serve for remediation.

· Running SAST/DAST tools inside pipeline via automation.

Requirements / Key Skill

·
Experience in the field of DevSecOps. Experience in implementing and integrating security tools into CI/CD pipeline.

·
Detailed experience working to secure platforms and products working across design, development and the operations to ensure security best practices are applied.

·
Experience with Automation in testing or orchestration Selenium, Maven, Ant, Msbuild, Npm, Yarn, Jenkins, Gitlab, Bitbucket, etc.

·
Knowledge of Agile and Scrum processes.

·
Understanding of virtualization and container technologies (Docker, Kubernetes, etc)

· Experience with various application security tools including SAST, DAST, Software composition analysis and application Penetration testing.

· Perform in-depth analysis of VAPT results, Ability to review assessment reports to provide risk mitigation & recommendations on that basis

· Familiarity with OWASP, SANS vulnerabilities along with its validations in source code and other security frameworks & Compliance.

· Knowledge in current and emerging security technologies, cybersecurity threats and techniques for exploiting security vulnerabilities in the code or application.

· Experience in analyzing threats of cloud and application components.

Desired Candidate Profile

·
Engineering Graduate in CS,IT, EC or InfoSec , CyberSec or MCA equivalent

·
Certifications Preferred : OSCP

·
Strong organizational, teamwork, multitasking & time management skills

·
12+ years of relevant working experience

·
Outstanding communication abilities. Ability to effectively communicate the required recommendations

·
Ability to work under pressure & Fast paced environment

·
Strong attention to detail with an analytical mindset & outstanding problem solving skills

·
Great Awareness of cyber security trends & hacking techniques