Job Description
Job Responsibilities:
- Build software libraries to provide secure services to software engineering teams.
- Engineer, uplift and integrate in-house developed security and analytic tool.
- Define an abstract but ideal/target data foundation upon which an intelligent-automation implementation can be based e.g. define all data points and insight-targets (for example detecting changes within specific categories of sensitive business logic; detection of functionality types such as HTTP, API, infra-as-code, thick-client etc;
- Implementing and engineering on top of the Cloudbees platform, capabilities for deriving the elements defined in ‘Data sources and foundation’.
- Provide frictionless integration with the client’s runtime, deployment and SDLC technologies
- Work closely with the client’s threat modelling team to build upon the existing threat pattern library with focus on supporting design components available within AWS, GCP & Azure
- Work closely with client stakeholder from across engineering and risk to ensure an outstanding developer experience that satisfies the client’s security needs
- Provide PROD assurance engineering support
- Help to communicate and promote best practices for security engineering
Basic Qualifications:
- Bachelor’s or Master’s degree in Computer Science or equivalent
- 6 – 10 years of experience in Secure Software development, deployment automation, environment management and modelling, and release coordination
- Proficiency in designing, developing and testing software in one or more technologies i.e. Python, Django, Groovy, React, RabbitQ.
- Proficiency in any one of Perl or bash.
- Proficiency in databases such as Oracle MySQL and IBM db2.
- Experience developing, deploying and supporting software across the full Continuous Delivery life cycle.
- Strong understanding of security concepts, including secure coding practices, trusted computing etc.
- The ability to reason about performance, security, and process interactions in complex distributed systems
- The ability to communicate technical concepts effectively, both in writing and orally, as well as the interpersonal skills required to collaborate effectively with stakeholders across diverse engineering teams
Preferred Qualifications:
- Prior experience in building services using public cloud providers such as GCP, AWS, Azure etc.
- Experience in working on AWS Lambda
- Experience with product threat modelling and risk assessment
- Good know-how of data protection principles, solutions and service-oriented architectures
- Experience with deploying software to containerized environments – Kubernetes/Docker
- Experience with Terraform or similar infrastructure-as-code platforms, as a user and/or as a service provider.
- Experience with Ansible as automation tool.
- Understanding of regulatory frameworks.
- Linux foundation sysadmin certified or some understanding of it.