Senior DevSecOps Engineer

Antisec; Brasil; Presencial; BRL 180 000 - 280 000; Tempo integral

Resumo da oferta

Antisec is seeking a DevSecOps Engineer to embed security into the development lifecycle. You will partner with development teams to craft secure CI/CD pipelines and automate security testing.

Responsibilities include designing secure pipelines, integrating tools, automating tests, and implementing IaC security best practices while monitoring production security alerts.

Qualificações

• 3+ years of DevOps or DevSecOps experience.
• Strong knowledge of CI/CD tools (GitLab CI, Jenkins, GitHub Actions).
• Experience with containerization (Docker, Kubernetes).
• Proficiency in scripting (Python, Bash).
• Understanding of cloud platforms (AWS, Azure, GCP).
• Knowledge of security tools (SAST, DAST, SCA).
• Familiarity with ISO 27001 and LGPD compliance.

Responsabilidades

• Design and implement secure CI/CD pipelines.
• Integrate security tools into development workflows.
• Automate security testing and vulnerability scanning.
• Collaborate with development and operations teams.
• Implement Infrastructure as Code (IaC) security best practices.
• Monitor and respond to security alerts in production environments.

Descrição da oferta de emprego

Join our team as a DevSecOps Engineer and help integrate security into the development lifecycle. You will work closely with development teams to build secure CI/CD pipelines and automate security testing.

Responsibilities

• Design and implement secure CI/CD pipelines
• Integrate security tools into development workflows
• Automate security testing and vulnerability scanning
• Collaborate with development and operations teams
• Implement Infrastructure as Code (IaC) security best practices
• Monitor and respond to security alerts in production environments

Requirements

• 3+ years of experience in DevOps or DevSecOps
• Strong knowledge of CI/CD tools (GitLab CI, Jenkins, GitHub Actions)
• Experience with containerization (Docker, Kubernetes)
• Proficiency in scripting languages (Python, Bash)
• Understanding of cloud platforms (AWS, Azure, GCP)
• Knowledge of security tools (SAST, DAST, SCA)
• Familiarity with compliance frameworks (ISO 27001, LGPD)