DevSecOps / Application Security

Requirements:

• Experience: 3 to 4 years in development projects with a focus on security, DevSecOps, AppSec, or cybersecurity.
• English: intermediate/advanced
• Education: Engineering or Bachelor's degree in Systems, Informatics, Cybersecurity, IT, or a related field.

What will you do?

• Advise development teams on Security by Design practices.
• Integrate security controls into CI/CD pipelines.
• Support the execution and monitoring of SAST and DAST analysis.
• Follow up on vulnerability remediation according to SLAs.
• Participate in architecture reviews and Threat Modeling.
• Identify security risks and gaps in applications and infrastructure.
• Supervise security controls in Development, QA, and Production environments.
• Support the attention and resolution of critical security findings.
• Work closely with Development, DevOps, Architecture, and Product teams.
• Participate in projects under SCRUM and/or SAFe methodologies.

Technical knowledge:

• DevSecOps and CI/CD
• SAST / DAST
• OWASP
• Vulnerability management
• Security by Design and Threat Modeling
• Kubernetes / AKS / Containers
• SonarQube and Veracode
• GitHub / GitLab
• Azure DevOps
• ISO 27001, NIST, CISA, and COBIT
• SCRUM and/or SAFe

Desirable:

knowledge in SSO, federation, encryption, certificate management, Active Directory, and ITIL.

Skills

• Effective communication with technical and business teams.
• Critical thinking and a risk management approach.
• Collaborative work with multidisciplinary teams.
• Organization and ability to manage multiple projects.
• Result orientation and follow-up on remediation plans.

We offer

• salary 35,000-40,000 net
• Superior benefits
• 100% payroll scheme.

Requirements

• Minimum education: Higher education
• Bachelor's degree 3 years of experience
• Languages: English