DevSecOps Engineer - Cloud

DevSecOps engineers will provide abilities on testing and monitoring security vulnerabilities and compliance status of our company's IT systems and cloud services by developing an automated security framework for robust deployment tools and processes, leveraging various scripting languages and appropriate solutions. Specifically, you will:

• Work closely with the development team and SRE team to identify potential security risks in the software development process and patch these weaknesses in a timely manner, and add countermeasures to prevent new threats.
• Work with our development team and SRE team to enhance security level on the existing CD/CI process.
• Support Information Security Engineers to define and implement security policies and standards related to CD/CI, SDLC, Cloud Security, Container Security areas.
• A part of the SRE team to design, deploy and deliver automation scripting and frameworks in monitoring, testing and managing security vulnerabilities in a cloud environment.
• Install, configure, and maintain security solutions deployed on operating systems, containers or cloud services.
• Support Information Security Engineers to conduct security assessment and review periodically related to privileged accounts, access rights, secure configurations, and patch management to ensure that IT systems and cloud services comply with security standards such as ISO 27001, NIST and CIS.
• Work together with Information Security engineers, SRE team and vendors to research, test and implement new security solutions.