DevSecOps Engineer
Job Description
The general roles and responsibilities of a DevSecOps engineer revolve around integrating security practices seamlessly into the software development lifecycle
Core Responsibilities:
Security Integration: Implementing security measures at every stage of the SDLC, from design and development to testing, deployment, and monitoring.
Automation: Automating security tasks like vulnerability scanning, code analysis, and compliance checks within the CI/CD pipeline.
Collaboration: Working closely with development, operations, and security teams to foster a security-conscious culture and ensure alignment on security goals.
Vulnerability Management: Identifying, assessing, and remediating security vulnerabilities in applications and infrastructure.
Incident Response: Participating in security incident response efforts, including monitoring, analysis, and remediation.
Security Tooling: Selecting, implementing, and managing security tools and technologies to support DevSecOps practices.
Compliance: Ensuring adherence to relevant security standards, regulations, and compliance requirements.
Security Awareness: Promoting security awareness and best practices among development and operations teams.
Personal Skills
Strong communication and collaboration skills.
Technical Skills
Understanding of DevOps principles and practices. Knowledge of security concepts and best practices. Experience with security tools and technologies (e.g., SAST, DAST, vulnerability scanners) Scripting and automation skills Configuration as code Infrastructure as code Private Cloud security experience
Education
Bachelor’s degree in a relevant field.
Job Location Riyadh, Saudi Arabia Job Role Information Technology Years of Experience Min: 10 Max: 15
