Before u proceed below to check the jobs/CVs, please select your favorite job categories, whose top job alerts you want in your email & Subscribe to our Email Job Alert Service For FREE
Job Location: Bangalore/Bengaluru
Key Responsibilities Include:
- Maintain and improve the security aspects of the Continuous Integration and Continuous Delivery environment. This includes both the embedded SW products for the transport system, as well as Java based Network Management products.
- Responsible for maintaining and improving security controls in Jenkins pipelines (Groovy background encouraged).
- Responsible for Jira/Confluence adaptations and integration towards Jenkins, CI/CD workflow.
- Global collaboration with distributed development teams and managers in Stockholm as well as with colleagues in e.g. Europe and Bangalore, India.
Experience Necessary for Success:
- Experience working with Developers, DevOps, and Engineering teams in a dynamic environment to promote/implement the DevSecOps program throughout the organization.
- Experience coordinating and performing vulnerability assessments through the use of automated and manual tools (Tenable, NMAP, etc.).
- Ability to review and analyze vulnerability data to identify security risks to the organizations network, infrastructure, and applications and determine any reported vulnerabilities that are false positives.
- Capability to prepare security vulnerability and risk management reports for management.
- Leadership and Teaming skills to coordinate remediation of vulnerabilities within established timeframes.
- Proficiency in understanding programing languages and reading C/C++ Programming and Bash, Python or other scripting languages.
- Familiarity with Information Security frameworks/standards (i.e. CIS, NIST, RFC2196, ISO 27001, ISO 27701, NIST 800-53r5, or GDPR).
- Comprehension in the security areas of Key Management Systems, Certificate Management, Encryption, Penetration Testing, Vulnerability Scanning, Security and Monitoring tools, etc.
- Experience configuring, implementing and leveraging computer security and networking diagnostic/monitoring tools.
- Knowledge of Windows and Linux patch management and related information security functions (authentication, encryption, iptables, SSL, Ciphers, etc.)
- Ability to work with APIs and Plugins to integrate security tools into established CI/CD pipelines
- Prior experience (3-5 years) in a Production Engineering or related position
- Experience with commonly used tools like Jenkins, Artifactory, Ansible, Docker, Bitbucket/Git, Maven, Gradle, Jira and Confluence.
Education Skills Necessary for Success:
- B.Sc. or M.Sc. degree within relevant field.
- C ISM, CISSP or other Security Certifications
- Good communication skills.
- English, written and spoken
Meriting experience and qualifications:
- Experience with Python, Groovy
- Experience with Docker
- Interest/ Experience in Build Machines Management/ Build Infrastructure Management
- Familiar with OVIRT cluster management
- Knowledge of Yocto Build System or Embedded Build systems
- A background in a DevSecOps role in an embedded SW organization
- DevSecOps Automation: Puppet, Ansible, GitHub
- Familiarity with API Security, Container Security, AWS Cloud Security
- Knowledge CCPA Standards and Policies and the associated certification and audit processes
- Auditing and Compliance Certifications such as CISA, PCI-ISA, and PCIP.
- Familiarity with Amazon AWS Policy, Configuration, and Security Management tools.
- Experience with security automation and machine learning.
- SAP and Salesforce development environment experience
Submit CV To All Data Science Job Consultants Across India For Free