DevSecOps Engineer (a)

Introduction

We are seeking a dedicated and skilled DevSecOps Engineer (a) in Stäfa to join the team and play a pivotal role in enhancing the security of the development lifecycle. The ideal candidate will be responsible for automating and integrating security processes, with a strong emphasis on vulnerability management. This role involves implementing cutting-edge security tools, enabling continuous security testing, and working closely with development teams to ensure that security feedback is seamlessly integrated into the development process.

Responsibilities

• Implementing into projects security tools such as SAST, secret scanning, and security testing report generation.
• Developing and maintaining CI / CD pipelines using tools like TeamCity, Jenkins, and Azure DevOps.
• Generating and analyzing Software Bill of Materials (SBOM) and integrating with tools like Dependency Track and Defect Dojo.
• Integrating security scanners like Semgrep and gitleaks.
• Collaborating with development teams to provide vulnerability feedback and support them with analysis and resolution.
• Utilizing containerization and orchestration tools like Docker and Kubernetes.
• Writing scripts and automation using Bash, Python, and PowerShell.

Qualifications

Have we caught your interest? Then apply now and become part of the team we look forward to getting to know you!