Golang Job: DevSecOps Engineer- SG5

The DevSecOps engineer will be responsible for driving implementation and automation of application and infrastructure life cycle by providing a robust CI/CD pipeline, allowing software to be validated for security and quality in a continuous fashion. They have to investigate and resolve technical issues, perform root cause analysis for fixing code level security vulnerabilities.

Skillset required:

• Experience in integrating, monitoring and improving DevSecOps tools and processes, automate routine tasks and improve system reliability
• Hands-on in programming languages such as Golang, Shell Script, Python, YAML etc.
• Experience with common DevOps related tools, such as Tekton, Jenkins, Artifactory, GitHub, Docker, Kubernetes, Terraform and various SDLC security tools such as Checkmarx, SonarQube, Black Duck etc.
• Experience with one or more cloud platforms, such as GCP, Azure and AWS
• Experience with DevSecOps workflows and pipelines as well as optimization of existing environments and tools with security shift-left focus
• Good knowledge of Agile processes (planning/standups/retros etc.) and interact with cross functional teams i.e. Development, Infrastructure, Security, Performance engineering and QA
  

Qualifications required:

• Two+ years of experience as a DevOps / DevSecOps engineer
• MCA or B.E/B.Tech (Computer Science/IT) or MS-IT College degree from an accredited institution; Domain Related Qualifications preferred.
• Strong knowledge of basic security principles
• Knowledge on Information Security Policy / ISO27001
• Self-Starter who can work in ambiguous situations and drive to a solution
• Strong interpersonal skills, including ability to educate and influence
• Good communication and presentation skills
• Willingness to learn new technologies and concepts

Position responsibilities include:

• Define development, test, release, update and support processes for DevSecOps operation.
• Deploying appropriate CI/CD tools; implementing various development, testing, automation tools, and required IT infrastructure
• Encouraging and building automated processes wherever possible
• Have the technical skill to review, verify, and validate the software code developed in the project.
• Knowledge of Risk mitigation techniques and fixing the code bugs
• Monitoring the processes during the entire lifecycle for its adherence and updating or creating new processes for improvement
• Identifying and deploying cybersecurity measures by continuously performing vulnerability assessment and risk management
• Coordination and communication within the team and with customers