Mid Level Cloud DevSecOps Engineer

Job Description:

Required Skills: - 3+ years total experience- IT transitioned to Security. 1-2 years in Security. - Cloud security that has worked with DevOps is fine. Understands the language is a + Someone who is coming out of DevOps and wants to go into Security. - Cloud Azure exposure - Needs to be able to speak to the business- very important!!

Top 3 requirements:

Understands Devops and DevSec Opps from an E-commerce perspective. Understands the concepts of coding. Needs to understand the designs that developers create in order to give feedback. They will not be doing any hands on coding.

Cloud security (Azure) and risk experience/exposure

Personality: Good communicator and personable. Able to work with different skillsets and transfer information across technical and business perspectives

Willing to learn is important- they need to pick things up quickly and learn their ways of learning.

Day to Day Responsibilities/project specifics:

Formally assess information security risks related to business projects, determine the potential impact of those risks, and conduct follow-up, throughout the project lifecycle, on any necessary remediation efforts. Ensure that IT solutions and business processes comply with Company policy, Company controls and applicable legal and regulatory requirements while also ensuring that business objectives are met.

Be the first point of contact for almost all security-related topics for DevOps teams (developers, architects, product owners, and the business). The platform security consultant will act as the conduit to expertise available within the ISO (Information Security Office) team.

Work hand in hand with DevOps teams to ensure that the security posture is in line with the risk appetite and threat landscape.

Leverage stakeholder management to ensure that security is imbedded in each brand and that their security needs are being met. Collaborate with other team members to identify opportunities for implementing common security solutions or leveraging existing solutions.

Develop strategies and drive efforts to facilitate business ownership of data, including creating/providing necessary tools for identification and tracking of data repositories, training materials, and professional presentations.

Actively expand consulting and assessment capabilities through training courses, mentoring, and daily interaction with stakeholders.