DevSecOps Engineer

Introduction & Summary:

This role requires a dedicated DevSecOps Engineer with extensive expertise in CI/CD processes and security integration. The ideal candidate will demonstrate solid experience in developing and maintaining CI/CD pipelines, while ensuring security measures are embedded throughout the software development lifecycle.

Main Responsibilities:

The primary responsibility of this role is to design and optimize CI/CD pipelines while integrating necessary security protocols.

Design and maintain industrial CI/CD pipelines across multiple projects.

Implement security controls within CI/CD frameworks.

Manage dependency repositories effectively.

Ensure compliance with security standards.

Execute thorough security scanning of applications.

Key Requirements:

Strong experience in CI/CD (GitLab CI, Azure DevOps, Jenkins, or equivalent).

Ability to design and maintain industrial CI/CD pipelines.

Solid knowledge of dependency management and repositories (Artifactory or equivalent).

Experience integrating security controls into CI/CD pipelines.

Good knowledge or hands-on experience with SBOM (CycloneDX, SPDX, etc.).

Experience with JFrog Xray or similar security scanning tools.

Nice to Have:

Familiarity with GitHub.