Senior Information Security Engineer

Job Title

Senior Information Security EngineerKey Skills:

• Solid grasp of security concepts
• Strong understanding of the entire Software Development Lifecycle
• Knowledge of the best security practices and principles 
• Adeptness in the architecture of applications
• Expertise in programming: Knowledge in languages like Python, JavaScript, Bash, PowerShell, and/or Perl
• Familiarity with automation: To optimize the operational and security processes, including incident response and mitigation. 
• Communication and collaboration skills: Working with TISO, SOC, other departments, and relevant professionals to integrate security throughout the SSDLC efficiently.
• Willingness to acquire new knowledge 
• General technical savviness

Core respnsibilites

DevSecOps adoption
  1. Assist organzational DevSecOps culture adoption by  performing a coordinator role between development, security, QA and operation teams

2.Continously discover automation opportunities in SSDLC, as well as in routine infrastructure management

3. . Work with the auditors/assessor for ongoing compliance audits/assessments. Ensure IT Systems and Infrastructure meet Amadeus compliance requirements.

CICD pipeline management
  1. Create, maintain and optimize pipelines to facilitate the development and release management
  2. Solution and build cross-tenancy pipeline in order to deploy applications to various self-managed and customer owned environments.
  3. Develop creative and customised solution for special pipeline tasks
  4. Integrate with Amadeus corporate CICD control process and tools

Cloud infrastructure(AWS) management
  1. Overall governance of cloud infrastructure includes security/networking/inventory/monitoring/backup/etc. management
  2. Proactively monitor and maintain our PROD hosting tenancy for different customers, as well as our testing  tenancy and central tenancy (AD, CICD pipeline servers)
  3. Proactively measure, assess and optimize cloud infrastructure performance

Education

University degree in Computer Science, Information Technology or equivalent

Relevant work experience

• Comfortable and enthusiastic with DevSecOps and Agile philosophies
• Experience in continuous integration and continuous develiery(deployment) implementation
• Strong skill in scripting and automating infrastructure relative tasks

• Deep understanding of SSDLC and product lifecycle, familar with popular software development technologies
• Broad knowledge of current infrastructure technologies
• Hands-on experience with implementing and configuring cloud-based infrastructure solutions, such as AWS and Azure
• Knowledge, passion and curiosity in scripting languages (e.g. python, powershell, shell)
• Understanding of network monitoring solutions and experience in Network Security
• Hands-on experience with tools like Jenkins, Teamcity, Octopus Deploy, ProGet would be a plus
• Knowledge and experience in Kubernetes/Docker would be a plus
• Experience in Git tool and branch model would be a plus

Business understanding

Background of aviation IT industry would be a plus

Diversity & Inclusion

Amadeus aspires to be a leader in Diversity, Equity and Inclusion in the tech industry, enabling every employee to reach their full potentialby fostering a culture of belonging and fair treatment, attracting the best talent from all backgrounds, and as a role model for an inclusive employee experience. 

Amadeus is an equal opportunity employer. All qualified applicants will receiveconsideration for employment without regard to gender, race, ethnicity, sexual orientation, age, beliefs, disability or any other characteristics protected by law.