Responsibilities
* Security Automation: Develop and maintain automated security tools and processes to identify vulnerabilities, perform code analysis, monitor systems and conduct security testing. This includes integrating security scanners, static code analysis tools, and vulnerability assessment tools into the CI/CD pipeline.
* Secure Infrastructure: Work with infrastructure and operations teams to design and implement secure cloud infrastructure, network architecture, and deployment processes. This involves ensuring proper access controls, encryption, and monitoring are in place.
* Continuous Monitoring: Implement security monitoring tools and processes to proactively identify and respond to security events and anomalies. This includes log analysis, intrusion detection, and system monitoring.
* Collaboration and Communication: Foster collaboration and communication between development, operations, and security teams. Act as a liaison to ensure that security requirements are understood and integrated into the development process.
* Compliance and Auditing: Assist in compliance assessments and audits to ensure adherence to regulatory requirements and industry standards. Collaborate with auditors and provide necessary documentation and evidence of security controls.
Desired Skills and Experience
* 3+ years in Security, SecOps, or DevSecOps roles
* Hands-on experience creating, identifying and fixing infrastructure misconfigurations using policy-as-code and IaC security scanning tools such as Checkov, tfsec, or Terrascan.
* Basic programming skills in JavaScript, TypeScript, Python;
experience with versioncontrol (e.G., Git) and CI/CD pipelines.
* Manage and tune WAF and firewall configurations (e.G., Cloudflare or equivalent) to protect systems.
* Familiarity with security principles, standards, and best practices, including common vulnerabilities (e.G., OWASP Top 10), secure coding, encryption, authentication, access control, and security testing.
* Proficiency in methodologies and tools, including understanding CI/CD pipelines, infrastructure automation (e.G., Docker, Kubernetes), configuration management, and monitoring/observability.
* Ability to assess risks and apply security controls, encompassing an understanding of threat modeling, risk assessment techniques, vulnerability management, and incident response planning.
* Effective collaboration with cross-functional teams (developers, security, operations), promoting security practices, and integrating security seamlessly into the development process.
* Proficiency in automation tools;
knowledge of security scanners (SAST, DAST), vulnerability management systems, log analysis tools, and security-focused frameworks for automating security processes.
* Security certifications are advantageous.
Total Rewards
Our workforce deserves fair and competitive pay with scalable benefits, rewards, and perks;
our total rewards programs reflect our commitment to inclusivity and access for all.
Some things you’ll enjoy
* Stock grant opportunities dependent on your role, employment status and location
* Additional perks and benefits based on your employment status and country
* The flexibility of remote work, including optional WeWork access
Deel is an equal-opportunity employer and is committed to cultivating a diverse and inclusive workplace. We provide accommodations on request throughout the recruitment process for applicants with disabilities. If you require accommodations, please inform our Talent Acquisition Team through the appropriate channel and a team member will be in touch to ensure equal participation.
#J-18808-Ljbffr