Senior DevSecOps DSO Analyst - Incident & Release Management

Senior DevSecOps (DSO) Analyst - Incident & Release ManagementAt Sleep Country Canada/Dormez-vous? (SCC/DV), we are inspired every day through our purpose to transform lives by awakening Canadians to the power of sleep and our vision to champion sleep as the key to healthier and happier lives, helping everyone achieve better tomorrows through better tonight's.Guided by our values - We CARE About People; We WIN Together; We DREAM Big and We DELIVER with Excellence - we are building on our 30-year foundation of taking care of each other and our customers' sleep needs, with passion and commitment to be the best that we can be. As a Senior DevSecOps Analyst - Incident and Release Management, you will be an integral part of the DSO Team, responsible for improving our DSO technologies and ensuring seamless software releases and efficient incident management.
Working closely with the Development, Operations, IT, Business, and Security teams, you will incorporate the best practices of release and change management into the software development and operational cycles.
You will be primarily focusing on our key technologies, including Oracle Cloud Retail Suite, Google Cloud Platform, Apigee, Java SpringBoot, and Big Commerce.
In this role, you will lead the efforts to develop the CI/CD/CT pipelines, manage the release processes, and promptly respond to incidents to maintain the highest levels of system integrity and availability.
Additionally, you will work on enhancing our monitoring and alerting platform, which consists of Dynatrace and PagerDuty.Responsibilities of this role will include but are not limited to:
Release Management:
Oversee the release process for applications spanning platforms and technology, ensuring secure and efficient change control and release management practices.Incident Management:
Lead the response to incidents, ensuring quick resolution, follow through to resolution, mitigation of risks, and implementation of lessons learned to prevent future occurrences.DSO Integration:
Integrate DevSecOps tools and practices at every phase of the software development lifecycle, from initial design through integration, testing, deployment, and software delivery.Automation:
Develop and implement automation strategies for DevSecOps processes to enhance efficiency and effectiveness, utilizing scripting languages and automation tools.Compliance and Best Practices:
Ensure compliance with relevant security standards and frameworks.
Promote security best practices and a culture of security awareness within the organization.Collaboration and Training:
Work closely with IT and business teams to foster a collaborative environment.
Provide training and mentorship on DevSecOps best practices and incident response protocols.Continuous Improvement:
Continually evaluate DevSecOps tools, technologies, and processes for improvement opportunities.
Stay abreast of the latest DevSecOps trends, threats, and technologies.QualificationsThe Qualifications and Experience we like to see:
Bachelor's degree in Computer Science, Information Security, or related field.Minimum of 7 years' experience in a DevSecOps or related role, with a focus on release and incident management.Understanding of the integration and configuration of SCA, SAST, DAST tools and secrets management systems in CI and CD pipelines.Hands-on experience with enterprise monitoring/alerting tools, such as Dynatrace and PagerDuty.5 years of development experience in Object-Oriented programming languages, preferably Java SpringBoot or similar, and associated build and test tools.Proficiency in automation tools and scripting languages (e.g., Python, Bash).Strong experience with Oracle Retail Suite, Google Cloud Platform.Working knowledge of Agile, SAFe, and DevSecOps.Working knowledge of GitHub/GitHub Actions, GCP CloudRun/CloudBuild/GKE deployment, Terraform and other Jira and Agile project management and Kanban boards.Hands-on experience with infrastructure as code tools.
Terraform is preferred.Understanding of security principles, frameworks (e.g., NIST, ISO, ITIL), and compliance requirements.Excellent problem-solving and leadership skills.Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate strategic information, security topics, policies, and standards as well as risk-related concepts to technical and non-technical audiences at various hierarchical levels.
•