Associate DevSecOps Engineer, Platform and Tooling

What you'll do

• Administer and support Application Security Testing (AST) tools like SAST, DAST, IAST, and SCA to identify vulnerabilities.
• Manage Application Security Posture Management (ASPM) tools to centralize findings and integrate reporting into developer workflows.
• Integrate security testing tools directly into CI/CD pipelines for automated software delivery.
• Write custom scripts and code to automate internal workflows and integrate various technologies.
• Configure and maintain CI/CD pipelines using platforms such as GitHub Actions and Azure DevOps.
• Implement container and artifact security solutions, including image scanning and dependency validation.
• Manage enterprise-level security tools like Snyk to ensure vulnerability assessment across the environment.

What we're looking for

• A Bachelor's degree and 5 years of experience or a Master's degree and 4 years of experience are required.
• At least 2 years of hands-on technical experience in DevSecOps, DevOps, or Site Reliability Engineering (SRE) is required.
• Experience integrating application security tooling such as SAST, DAST, IAST, and SCA into CI/CD pipelines is required.
• Experience configuring, supporting, or administering CI/CD pipelines like GitHub Actions and Azure DevOps is required.
• Experience automating workflows and integrating platforms using programming languages such as Python is required.
• Experience with commercial or in-house Application Security Posture Management (ASPM) tooling is preferred.
• Experience implementing pre-deployment container and artifact security tooling, including image scanning and dependency validation, is preferred.
• Experience implementing container and artifact security solutions like Snyk or JFrog Artifactory is preferred.