DevSecOps - CI/CD (5+)
Deloitte | 198 days ago | NM

 

Required:

·       Minimum of 5-7 years’ experience in application security development, security testing, deployment and security

management phases;

·       Deep interest in application specific vulnerabilities, code development and infrastructure knowledge;

·       Investigative and analytical problem-solving skills;

·       Experience in collecting, analyzing, and interpreting qualitative and quantitative data from defined application security services related sources (tools, monitoring techniques etc.)

·       Knowledge and experience of OWASP Top 10, SANS Secure Programming, Security Engineering Principles;

·       Hands-on experience in performing code review of dot Net, Java and Swift and objective C code;

·       Hands-on experience in running, installing and managing SAST, DAST , SCA and IAST solutions, such as Checkmarx, Fortify and Contrast in large enterprise

·       Understanding of leading vulnerability scoring standards, such as CVSS, and ability to translate vulnerability severity as security risk;

·       Hands-on experience on at least one CI/CD tool set and building pipelines using Team city, Bamboo, Jenkins, Chef, Puppet, selenium, AWS and AZURE DevOps;

·       Hands on experience on container technology such as Kubernetes, Dockers, AKS, EKS.

·       Knowledge of cloud environments and deployment solutions such as server less computing;

·       Hands on experience in penetration testing of mobile, desktop and web applications;

·       Must have experience in writing custom exploitation scripts and utilities;

·       Possession of excellent oral and written communication skill;

·       Knowledge of one or more scripting languages for automation and complex searches;

·       Must have cloud security specialization in Security; and

·       Certification such as EC-Council CEH (Certified Ethical Hacker), DevSecOps Professional (CDP) , ISC2 Certified Cloud Security Professional (CCSP), Certified API Security Professional (CASP) , CTMP (Certified Threat Modeling Professional) etc. are preferred.

Official notification
Contact US

Let's work laptop charging together

Any question or remark? just write us a message

Send a message

If you would like to discuss anything related to payment, account, licensing,
partnerships, or have pre-sales questions, you’re at the right place.