Security Engineer (DevSecOps)

Netsentries; Dubai; On-site; USD 60,000 - 90,000; Full time

Job summary

Netsentries is looking for a Security Engineer with a strong focus on CI/CD security and DevSecOps. In this role, you will conduct security assessments, enhance Kubernetes security, and ensure robust security protocols in cloud-native environments. The ideal candidate will have relevant certifications and a solid understanding of container technologies. Strong collaboration and communication skills are crucial for this position, as you will work closely with development teams.

Qualifications

• Strong background in CI/CD and container technologies.
• Proven experience in securing Kubernetes and containerized environments.
• Proficiency in at least one scripting language: Python, Bash, NodeJS.

Responsibilities

• Conduct security assessments and audits within CI/CD pipelines.
• Enhance security measures for Kubernetes and container deployments.
• Collaborate with various development teams to improve DevSecOps processes.

Skills

Collaboration

Analytical skills

Problem-solving

Education

Certified DevSecOps Professional (CDP)

Certified Kubernetes Security Specialist (CKS)

Tools

Jenkins

OpenShift

GitHub Actions

ArgoCD

Istio

Job description

Netsentries FZCO is seeking a Security Engineer with expertise in CI/CD Security (DevSecOps). This role is integral in ensuring the security and integrity of our CI/CD Platform, particularly focusing on DevSecOps and Kubernetes security. A significant aspect of the role involves conducting security assessments, recommending designs and enhancements, troubleshooting.

Key Responsibilities:

• Conduct security assessments and audits within CI/CD pipelines. Familiarity with tools such as Jenkins, ArgoCD and GitHub Actions
• Review and enhance security measures for Kubernetes and container deployments.
• Implement and review security practices in cloud-native environments, knowledge about service mesh architectures, API gateways and the CNCF landscape into DevOps processes.
• Oversee security aspects of orchestration platforms like OpenShift.
• Collaborate with various development teams to bring continuous improvement in DevSecOps processes and tools.
• Develop and maintain security documentation and guidelines for CI/CD pipeline tools and processes.
• Relevant certifications (e.g., Certified DevSecOps Professional (CDP)) are a plus.
• Work Closely with engineering teams to ensure security while architecting and building new systems.

Qualifications:

• Strong background in CI/CD and container technologies.
• Proven experience in securing Kubernetes and containerized environments.
• Proficiency in at least one scripting language: Python, Bash, NodeJS
• Familiarity with OpenShift, ArgoCD, GitHub Actions, Istio, and DevSecOps methodologies.
• In-depth knowledge of containers, Kubernetes, docker, API Gateway, Jenkins
• Ability to design and implement robust security protocols and measures.
• Understanding of network segmentation, Network Policies, Egress policies etc.
• Strong analytical and problem-solving skills.

Soft skills:

• Ability to collaborate with multiple stakeholders and manage their expectations from a security perspective.
• Holistic thinking; must balance security and functionality using practical demonstrable examples. Must also contribute to and implement “good architecture principles” to lower technical debt.
• Assertive personality; should be able to hold her/his own in a project board or work group setting.
• Superlative written and verbal communication skills; should be able to explain technical observations in an easy-to-understand manner.
• Can work independently and self-motivated.

Preferred Certifications:

• Certified DevSecOps Professional (CDP)
• Certified Kubernetes Security Specialist (CKS)
• Any other equivalent certification for DevSecOps