Senior DevSecOps

Insight Global
CA - canada
January 27, 2025

Job Details

6 months contract

Day-to-day

Insight Global is looking for a Sr DevSecOps Engineer to join one of Canada boutique financial institutions. You will be crucial in integrating security seamlessly throughout our software development and deployment processes. Your expertise will bridge the gap between development, operations, and security, ensuring security is built into the infrastructure from the ground up and maintained throughout the application lifecycle. You will be responsible for implementing and managing automated tools and technologies that help prevent vulnerabilities, managing cloud environments, and ensuring compliance with industry standards. This position requires a proactive approach to security, involving continuous risk assessments, threat modelling, and the adoption of innovative security solutions. You will work closely with cross-functional teams to advocate for secure coding practices, influence a security-first culture, and train colleagues on the latest security threats and mitigation strategies.

• Communicate security requirements to product teams and validate implementation before going live.

• Publish and disseminate CI/CD best practices, patterns, and solutions.

• Design action plans to address CI/CD platform/tools/solutions' shortcomings and difficulties.

• Create, develop, and implement solutions for infrastructure and security requirements.

• Design and implement robust security solutions for cloud environments across multiple cloud platforms (AWS, Azure).

• Conduct Threat Modeling and Risk sessions to identify and mitigate potential security threats at early stages of the development lifecycle.

• Develop and maintain a Security Center of Excellence for all new products and substantial changes to ensure security requirements are met before they proceed to production.

• Experience with security automation and machine learning.

• Integrate, monitor and tune SAST/DAST platforms.

• Ability to express technical information clearly at different organizational levels.

• Evaluate and deploy advanced cloud-native security tools and technologies.

• Stay updated on emerging technologies in cloud security, AI, and automation, and apply innovative solutions to enhance the security framework.

Must haves

Proven experience (6+ years) as a DevSecOps Engineer or in a similar role.

CISSP, CCSP, AZ-400 or other Security Certifications.

Comprehensive technical expertise in various DevSecOps toolkits, including Ansible, Jenkins, Jira, Terraform, Veracode, Git/Version Control Software, or comparable technologies.

Detailed familiarity with information security frameworks and standards (NIST, CIS and CCM).

Knowledge of DevOps Automation (TerraFrom, GitHub, GitHub Actions).

Knowledge of PCI-DSS, SOC.

Knowledge of Prisma cloud, SIEM, SOC, Microsoft Sentinel, or similar services.

Familiarity with API Security, Container Security, AWS Cloud Security.

Familiarity with Amazon AWS policy, configuration, and security management tools.

Extensive familiarity with Azure Resource Manager templates and configuration.

Deep knowledge of SDLC best practices, with a full understanding of OWASP Top 10, SANS Top 25, and ASVS levels.

Highly creative problem-solver.

Read the full job description and apply online on the recuiter's web-site

Related Job Postings

Writer/Journalist Internship Part-Time in Worldwide - Remote Worldwide

Borgen Project

CA - Churchill
January 21, 2025

Are you passionate about making a difference in the world? Look no further! • The Borgen Project is an international organization that works at the political level to improve living conditions for people impacted by war, famine and poverty. • With 20 years of experience in the advocacy...

Find Jobs Hiring Now Near You!

Get Jobilize Job Search Mobile App Now