DevSecOps Engineer

Dubai, United Arab Emirates | Posted on 07/07/2023

As cyber threats evolve, it becomes increasingly important to incorporate security as a core element of the software development process . In this challenging and rewarding role, you will be responsible for designing and implementing systems that prioritise security from the beginning of the software development life cycle (SDLC). By working closely with the software development, security, and operations teams, you will help to improve processes, tools, and culture to ensure that security is treated as a shared responsibility. Through your efforts, our continuous integration and continuous delivery (CI/CD) are done securely.

As a DevSecOps engineer at Deriv, you will have the opportunity to make a real impact on our company's success. You will have the chance to work on cutting-edge technologies and stay up-to-date with the latest DevSecOps best practices. If you are a highly skilled and motivated engineer with a passion for building secure, scalable, and reliable systems , apply for this role to take on a new challenge and make a real difference.

• Work closely with Engineering and Operations to ensure that security and privacy is integrated into all aspects of the Software Development Lifecycle
  
  
• Threat Modelling evaluation and analysis of potential risks associated with different processes, systems, or technologies and document the findings in written reports
  
  
• Regularly check and monitor processes and systems to identify any potential vulnerabilities or weaknesses
  
  
• Create and implement automated processes and tools to improve the efficiency and effectiveness of security controls
  
  
• Respond to and manage security incidents, such as data breaches or cyber-attacks, immediately and effectively
  
  
• Testing, selection, and implementation of technologies, tools, and working methods: Evaluate and test different security technologies, tools, working methods and implement those that are deemed appropriate and effective for the organisation
  
  
• Collaborate with the wider security team to share ideas, tools and processes and help reinforce a security culture within Deriv
  
  
• Create awareness on security best practice through presentations on our security architecture and risk
  
  

Requirements

• The ability to inspect code and actively seek out security issues and vulnerabilities
  
  
• Strong understanding of software development, security, operations principles and best practices
  
  
• In-depth knowledge of Public Cloud Security and their core components including EC2, EKS, AWS Networking (Subnetting, Route Tables, SG’s, VPC, VPC Peering, NACLS, VPN), RDS, Storage (S3, EBS), SSO, and Federation
  
  
• Experience with DevOps tools and best practices (e.g. Git, Jenkins, CircleCI, Ansible)
  
  
• Knowledge of security and privacy principles including best practices (e.g. authentication, authorization, encryption, GDPR)
  
  
• University degree in computer science or a related field
  
  
• Strong problem-solving skills
  
  
• Excellent spoken and written English communication skills
  
• Cooperative work environment
  
  
• Individualised career graph
  
  
• Knowledge sharing and training sessions
  
  
• Hackathons to help you expand your tech stack
  
  
• Annual performance bonus
  
  
• Casual dress code
  
  
• Travel and internet allowances
  
  
• Inspiring work environment and creative freedom
#J-18808-Ljbffr