.We are seeking a highly skilled and motivated DevSecOps Specialist to join our dynamic Cybersecurity team. The ideal candidate will integrate security practices into our infrastructure processes, ensuring that security is an integral part of our software development lifecycle. You will work closely with development, operations, and security teams to automate security processes, develop security protocols, and ensure compliance with industry standards.Reporting to the Director of Security, this hands-on technical role will be working on a range of security projects and activities. You will be directly influencing the security posture of the company to ensure that security plays a key part in everything we do.What you'll be doing Integration of Security Practices:Embed security measures into the CI/CD pipeline to ensure that security is incorporated at every stage of the software development lifecycle. Develop and implement automated security testing during development, including static and dynamic code analysis, vulnerability scanning, and configuration management. Collaboration and Communication:Work closely with development and operations teams to ensure secure design, development, and deployment of applications. Collaborate with cross-functional teams to define and implement security controls and processes. Security Monitoring and Incident Response:Monitor applications and infrastructure for security breaches and respond promptly to any security incidents. Develop and maintain incident response plans and conduct regular security drills. Risk Management and Compliance:Conduct regular security assessments and audits to identify vulnerabilities and ensure compliance with industry standards and regulations. Implement and manage security policies, standards, and procedures to safeguard company assets. Continuous Improvement:Stay updated with the latest security threats, trends, and technologies. Advocate for security best practices and continuous improvement in security processes and tools. Tooling and Automation:Select, build, implement, and manage security tools and technologies to enhance the security posture of the development and deployment processes. Automate repetitive security tasks to improve efficiency and consistency. Day to Day:Analyse applications, systems, and infrastructure to identify key security risks, and recommend and drive security improvements. Contribute to technical documentation, system design and product evaluations. Be part of an on-call rota and provide support in the event of a security incident as required. Contribute to the development of security standards, threat modelling and security awareness and training. Requirements 4+years experience in building and deploying Cloud workloads. Expertise in managing Infrastructure as a code and in using Terraform to deploy Cloud workloads
