Security Engineer

JD- Security Engineer the Security Expert will be part of the DSO Team and beresponsible for defining and documenting security processes, creating hardening guidesand policies, and integrate, configure and manage security tools to facilitate the futureDevSecOps ways of working. The typical tasks include:•Provide security expertise and guidance to the DSO teams and Enablement teams.•Document and drive the adoption of secure engineering best practices.•Develop and evolve policies around information security.•Develop scripts to automate security processes.•Document the use of security tools and processes.•Establish mechanisms and tools for security automatization within the SDLC Musthave: 3-5+ years of experience in the information security field 3-4+ years of experienceperforming security testing (SAST, SCA, DAST and security on containers). Preferablyexperience on Microfocus products as Fortify, Web Inspect or Fortify SSC. As well asSonatype Nexus IQ and Prisma Cloud 3-4+ years of experience with embeddingsecurity into CI/CD pipelines 3+ years’ experience with agile methodologies 3+ years ofexperience in DevSecOps 2-3+ years of experience with securing containerizedenvironments (Docker, Kubernetes) and virtual machines. 2-3+ years’ experience withAzure 2+ years of experience with Azure DevOps and GitHub Scripting skills.Goodcommunication skillsMandatory skills:• 6+ years of experience securing infrastructure in Azure (Best) or AWS via automation• 2+ years of experience in vulnerability management, risk management, etc.• 3+ years of experience as developer and Security Engineering• Experience implementing security monitoring, logging and alerting• Experience on Terraform and Ansible