DevSecops Engineer

Job Description

IntroductionIBM Cloud Computing is a one-stop shop which provides all the cloud solutions & cloud tools the industries need. IBM Cloud portfolio includes infrastructure as a service (IaaS), software as a service (SaaS) and platform as a service (PaaS) offered through public, private and hybrid cloud delivery models, in addition to the components that make up those clouds.IBM Cloud ensures seamless integration into public and private cloud environments. The infrastructure is secure, scalable, and flexible, providing customized enterprise solutions that have made IBM Cloud the Hybrid Cloud Market leader with our market leading IAAS and PAAS Platforms. The IBM Cloud platform is the public cloud offering from IBM providing services to global enterprises. IBM Cloud is the Cloud for Smarter Business, built on Open Technology with Developer Tools and supports solutions by Industry. We run the services and workloads from Watson, Blockchain, Services, Security, and IoT.Ready to help drive IBMs success in the Cloud market This is your chance to research and learn new Cloud related technology products and services, as well as to design and implement quick Cloud based prototypes while advancing your career in leading edge technology.Your Role and Responsibilities Who you are: Security/Compliances job is to ensure IBM Key Protect / Cloud Object Storage is operating in the most secure manner protecting IBMs assets from threats both internal and external. Automation is key in the world of managing Security and Compliance therefore a programming background is also desired as needed. What you ll do: (Requires complete changes) Security and Compliance engineer needed to help support numerous system security and audit based deliverables helping the team to ensure controls are in place and functioning. You will assist in various audit related activities from ISO, SOC2, FedRamp, PCI, etc. to help ensure the environment is successfully operating within required controls to guarantee successful certification outcomes. You will also assist in helping to ensure security vulnerabilities are implemented in a timely manner by responsible teams. Security vulnerabilities are one of many different controls within the Security/Compliance team. How we ll help you grow: You ll have access to all the technical and management training courses to become the expert you want to be. You ll learn directly from Senior members/leaders in this field. Youll have the opportunity to work with multiple clients. Required Professional and Technical Expertise (Required Validation) The Role We are seeking an enthusiastic, passionate professional for a DevSecOps Engineer II position with established experience with cloud (e.g. AWS, Azure, GCP) services, DevOps practices such as build/release management, secure SDLC/DevSecOps practices such as automating security processes in CI/CD pipeline, and general automation. Your skills are broad, implementing cloud solutions for various application architectures, scripting, database, monitoring, Metrics and Log aggregation services and you easily transition between those and handle multiple projects and priorities. Required Technical and Professional Expertise

• 3+ years of experience
• Desirable developing languages: Shell scripting, Python, Golang or any other scripting language.Automation experience is a must.
• Extensive experience with Cloud platform - AWS/Azure/any of the public cloud platforms.
• Experience in ELK, Graylog and other log aggregation services.
• Knowledge of configuration management tools: Ansible, Salt, Chef, Puppet.
• Extensive experience with cloud provisioning tools
• Extensive experience working with different DevOps and Dev teams to enable cyber
• security features and patch vulnerabilities.
• Experience creating meaningful alerts to detect security incidents.
• Deep understanding of application security architecture and lifecycle.
• Extensive experience with vulnerability management.

Keyskills :
softwareasaservice handlemultipleprojects applicationsecurityarchitecture hybridcloud privatecloud cloudcomputing shellscripting developertools audiomastering applicationsecurity progressivethinking tatementsofworksow