DevSecOps Security Engineer\t<\/p>\n

\u0627\u0644\u0648\u0635\u0641 \u0627\u0644\u0648\u0638\u064a\u0641\u064a<\/h2>\n

Job Description<\/p>\n

Our Mission is to Simplify Life. We are looking to Simplify and automate complex decision-making for customer centric industries, like Utilities, Financial Services, Logistics, and commerce, that drive the world's economies and you have the chance to join the revolution. We are trying to solve huge challenges in today's enterprise that are directly impacting the employee and customer experience.<\/p>\n

<\/p>\n

What can we promise you:<\/p>\n

\n
• You\u2019ll join a global family of awesome, passionate people that are working together to build a sustainable, scalable ecosystem committed to using logic to create a better experience.<\/li>\n
• We want you to help us become better. You will be empowered to drive change and innovate.<\/li>\n
• That we will invest in you. We will give you the opportunity to master your domain and drive excellence.<\/li>\n<\/ul>\n

  <\/p>\n

  Main Objective of the Position:<\/p>\n

  \u200b<\/p>\n

  The DevSecOps Engineer – Security Engineer is responsible for implementing the latest technologies to support Avertra\u2019s IT security framework and ensuring that Avertra\u2019s security program is carried out across the organization.<\/p>\n

  <\/p>\n

  Main Job responsibilities:<\/p>\n

  \n
  • Ensure that our development considers the latest thinking, patterns in software security development and best practice – providing recommendation, with user stories<\/li>\n
  • Ensure that capabilities are deployed through a continuous development pipeline with security requirements satisfied at the time of deployment<\/li>\n
  • Engineer solutions on AWS, Azure DevOps, and Google Cloud Platform (GCP) using Infrastructure-As-Code methods such as Terraform and Ansible<\/li>\n
  • Work with the DevOps and engineering teams to create effective CI\/CD implementations, helping to configure and maintain them<\/li>\n
  • Setting up scans and continuous monitoring<\/li>\n
  • Defining hardening controls and security policies for Kubernetes and docker<\/li>\n
  • Hands on experience with Kubernetes, docker, AWS EKS and ECS<\/li>\n
  • Setting up secure CI\/CD pipelines for scanning of images and docker registries<\/li>\n
  • Help with the release management of new software into the production platform<\/li>\n
  • Researches emerging threats and vulnerabilities to aid in the identification of incidents<\/li>\n
  • Generates reports on assessment findings and summarizes to facilitate remediation tasks to the technical and management teams<\/li>\n
  • Plans, develops, and executes vulnerability scans of organization\u2019s projects in the Software Development Life Cycle (SDLC)<\/li>\n
  • Recommends security controls and\/or corrective actions for mitigating software and architecture vulnerabilities<\/li>\n
  • Good understanding of RBAC (Role based Access Controls) principles<\/li>\n
  • Good understanding of Security by Design and Privacy by Design principles<\/li>\n
  • Produces vulnerability, configuration, and coverage metrics and reporting to demonstrate assessment coverage and remediation effectiveness<\/li>\n
  • Perform periodic security and compliance related reviews and audits on software lifecycle and measuring against different regulations such as ISO, NIST, SOC, HIPAA<\/li>\n<\/ul>\n

    <\/p>\n

    \u0627\u0644\u0645\u0647\u0627\u0631\u0627\u062a<\/h2>\n

    Needed competencies:<\/p>\n

    \n
    • Knowledge of OpenShift, Kubernetes, and Docker<\/li>\n
    • Experience with AWS, Azure, and\/or Google Cloud<\/li>\n
    • Knowledge of Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST) tools<\/li>\n
    • Experience with CI\/CD pipeline tools such as Ansible, Jenkins, GitLab\/ GitHub and Artifactory or Nexus<\/li>\n
    • Knowledge of PCI-DSS, HIPPA, SOX, GDPR, and CCPA Standards and Policies and the associated certification and audit processes would be a plus<\/li>\n
    • Familiarity with security policy, configuration, and security management tools<\/li>\n
    • Experience with security automation and machine learning<\/li>\n
    • Ability to assess, select and successfully deploy appsec tools across multiple domains.<\/li>\n
    • Ability to speak and write clearly and accurately<\/li>\n<\/ul>\n

      <\/p>\n

      Education:<\/p>\n

      <\/p>\n

      Bachelor's degree in Engineering, Cyber Security, Computer Science or a related technical discipline with 3+ years of experience with development and security<\/p>\n

      <\/p>\n

      Experience:<\/p>\n

      \n
      • At least 3 years of experience in IT Security, Controls, or Auditing<\/li>\n
      • Knowledge of OpenShift, Kubernetes, and Docker<\/li>\n
      • Experience with AWS, Microsoft Azure, and\/or Google Cloud<\/li>\n
      • Knowledge of Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST) tools<\/li>\n
      • Experience with CI\/CD pipeline tools such as Ansible, Jenkins, GitLab\/ GitHub and Artifactory or Nexus<\/li>\n
      • Hands-on experience using VeraCode, SonarQube, a plus<\/li>\n
      • Knowledge of Windows and Linux security and patch management<\/li>\n
      • At least 2-3 years of experience in the Application Development (DevOps)<\/li>\n
      • At least 1 year of experience in Application Security Testing<\/li>\n<\/ul>\n

        Knowledge, Skills and Abilities:<\/p>\n

        \n
        • Excellent English<\/li>\n
        • Able to interact with internal and external customers remotely via phone or conference system<\/li>\n
        • Must possess a minimum of intermediate skill level with MS, Word, Excel and PowerPoint<\/li>\n
        • Knowledge of relevant software computer applications and systems<\/li>\n
        • Effective listening skills<\/li>\n
        • Multi-tasking capabilities<\/li>\n<\/ul>\n

          Preferences:<\/p>\n

          <\/p>\n

          SAST & DAST tools related education and certificates are beneficial<\/p>\n

          <\/p>\n

          Travel:<\/p>\n

          <\/p>\n

          Up to 15%<\/p>\n

          <\/p>\n

          Work Schedule:<\/p>\n

          \u200b<\/p>\n

          Per Jordan office work schedule<\/p>\n

          \u062a\u0641\u0627\u0635\u064a\u0644 \u0627\u0644\u0648\u0638\u064a\u0641\u0629<\/h2>\n

          \n

          \u0645\u0646\u0637\u0642\u0629 \u0627\u0644\u0648\u0638\u064a\u0641\u0629<\/dt>\n

          \u0639\u0645\u0627\u0646, \u0627\u0644\u0623\u0631\u062f\u0646 <\/dd>\n

          \u0642\u0637\u0627\u0639 \u0627\u0644\u0634\u0631\u0643\u0629<\/dt>\n

          \u062e\u062f\u0645\u0627\u062a \u062a\u0643\u0646\u0648\u0644\u0648\u062c\u064a\u0627 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a<\/dd>\n

          \u0637\u0628\u064a\u0639\u0629 \u0639\u0645\u0644 \u0627\u0644\u0634\u0631\u0643\u0629<\/dt>\n

          \u0635\u0627\u062d\u0628 \u0639\u0645\u0644 (\u0627\u0644\u0642\u0637\u0627\u0639 \u0627\u0644\u062e\u0627\u0635)<\/dd>\n

          \u0627\u0644\u062f\u0648\u0631 \u0627\u0644\u0648\u0638\u064a\u0641\u064a<\/dt>\n

          \u062a\u0643\u0646\u0648\u0644\u0648\u062c\u064a\u0627 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a<\/dd>\n

          \u0646\u0648\u0639 \u0627\u0644\u062a\u0648\u0638\u064a\u0641<\/dt>\n

          \u062f\u0648\u0627\u0645 \u0643\u0627\u0645\u0644<\/dd>\n

          \u0627\u0644\u0631\u0627\u062a\u0628 \u0627\u0644\u0634\u0647\u0631\u064a<\/dt>\n

          \u063a\u064a\u0631 \u0645\u062d\u062f\u062f<\/dd>\n

          \u0639\u062f\u062f \u0627\u0644\u0648\u0638\u0627\u0626\u0641 \u0627\u0644\u0634\u0627\u063a\u0631\u0629<\/dt>\n

          1<\/dd>\n<\/dl>\n

          \u0644\u0644\u062a\u0642\u062f\u0645 \u0639\u0644\u0649 \u0627\u0644\u0648\u0638\u064a\u0641\u0629<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

          DevSecOps Security Engineer
          \n\u0627\u0644\u0648\u0635\u0641 \u0627\u0644\u0648\u0638\u064a\u0641\u064a<\/p>\n

          Job Description
          \nOur Mission is to Simplify Life. We are looking to Simplify and automate complex decision-making for customer centric industries, like Utilities, Financial Services, Logistics, and commerce, that drive the world's economies and you have the chance to join the revolution. We are trying to solve huge challenges in today's enterprise that are directly impacting the employee and customer experience.<\/p>\n

          What can we promise you:
          \nYou\u2019ll join a global family of awesome, passionate people that are working together to build a sustainable, scalable ecosystem committed to using logic to create a better experience.We want you to help us become better. You will be empowered to drive change and innovate.That we will invest in you. We will give you the opportunity to master your domain and drive excellence.<\/p>\n

          Main Objective of the Position:
          \n\u200b
          \nThe DevSecOps Engineer – Security Engineer is responsible for implementing the latest technolo..<\/p>\n","protected":false},"author":2,"featured_media":12861,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_ti_tpc_template_sync":false,"_ti_tpc_template_id":"","spay_email":"","footnotes":""},"categories":[32,3],"tags":[],"class_list":["post-384667","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-__","category-3"],"jetpack_featured_media_url":"https:\/\/wathefty.com\/jobs\/wp-content\/uploads\/2022\/06\/20245885_1421686584575593_7362247120580106475_n.png","_links":{"self":[{"href":"https:\/\/wathefty.com\/jobs\/wp-json\/wp\/v2\/posts\/384667","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wathefty.com\/jobs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wathefty.com\/jobs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wathefty.com\/jobs\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/wathefty.com\/jobs\/wp-json\/wp\/v2\/comments?post=384667"}],"version-history":[{"count":0,"href":"https:\/\/wathefty.com\/jobs\/wp-json\/wp\/v2\/posts\/384667\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/wathefty.com\/jobs\/wp-json\/wp\/v2\/media\/12861"}],"wp:attachment":[{"href":"https:\/\/wathefty.com\/jobs\/wp-json\/wp\/v2\/media?parent=384667"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wathefty.com\/jobs\/wp-json\/wp\/v2\/categories?post=384667"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wathefty.com\/jobs\/wp-json\/wp\/v2\/tags?post=384667"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}