الوظيفة

DevSecOps (Expert)

الوصف ومتطلبات فرصة العمل

Job description :
-       Accountable for the overall implementation of the Application Security development Process
-       Collaborate with business teams, developers, and testers to define and implement holistic security assurance processes
-       Security Test, build &  execution, defect identification, and reporting in a regulated environment, including security code review and scanning
-       Develop high-quality automated tests to support development
-       Ensure the DevOps pipeline supports the implementation of secure development/operation practices
-       Review and consult on security risks of Mobile, Web, and Cloud applications
-       Provide executive summary reports of assurance metrics to security governance team with a comprehensive inventory of the attack surface, the state of testing and defensive coverage of surfaces, and real-time accounting of open risks within each application
-       Create a center of expertise and library learning center for common application security design and reuse
-       Participate in the definition and documentation of OJ security standards and best practices
-       Analyzing source code, both with manual and automated tools for security related weaknesses and common problems
-       Performing manual and automated analysis on applications using open source and custom tools (preferably Secure Code)
-       Proactively testing using a mix of static and dynamic application security tests (SAST and DAST)
-       Coach with development teams to ensure risk is understood as well as to track and validate all remediation tasks
-       Identifies, prioritizes and develops reusable security services to be provided to development teams
-       Incorporates security vulnerabilities and advisories related to 3rd party libraries and software into the development lifecycle; recommends and prioritizes incorporation of software patches into the development and operations backlog
Recommends and assists with incorporating any security tests into proactive security monitoring for production systems.
 
Job Requirements  :
-       Bachelor  degree in Computer Science, Software Engineering, Information Systems, or an equivalent technical degree
-       Minimum of five years' experience managing a SDL (Secure Software Development Life Cycle) that integrates security into all stages of software development process for a large development organization
-       Experience with implementing and integrating automated security tests with CI/CD tools such as Jenkins
-       Demonstrate problem solving, analytical skills and technical troubleshooting skills
-       Familiarity with OWASP ZAP or other testing tools
-       Demonstrate professional experience with Agile methodologies (Scrum, Canban) and secure software development
-       Experience with Relational databases such as Microsoft SQL and MySQL
-       Experience with Threat Modeling
-       Demonstrate expertise in a developer role for applications in a high-security environment and understanding of modern development, languages, and hosting platforms
-       Demonstrate knowledge of secure build and configuration standards in a highly regulated environment
-       Developer Certifications (examples include SCWCD, SCJP, SCJD, SCJA, MCSD, etc.)
-       Familiarity with industry changes in security standards, information governance, development standards, methods and emerging 3rd party security software in order to advise on security and leverage industry best practice in the design and construction of products
-       Experience in conducting code reviews, black/white box testing and application threat modeling
-       CISM, CISSP, OSCP, CEH preferred
-       Strong commitment to working as a team
Proven ability to write clear and concise documentation

https://sajjil.gov.jo/ar/%D8%A7%D9%84%D8%A7%D8%B1%D8%AF%D9%86/%D8%B9%D9%85%D9%84-%D9%88%D8%B8%D8%A7%D8%A6%D9%81/%D8%B9%D9%85%D8%A7%D9%86/130477-DevSecOps--Expert--at-%D9%85%D8%AC%D9%85%D9%88%D8%B9%D8%A9-%D8%A7%D9%84%D8%A7%D8%AA%D8%B5%D8%A7%D9%84%D8%A7%D8%AA-%D8%A7%D9%84%D8%A3%D8%B1%D8%AF%D9%86%D9%8A%D8%A9-

متطلبات الوظيفة

غير محددة

ساعات العمل

غير محددة

شارك هذه الوظيفة