DevSecOps – Staff Engineer

Forbes Advisor; Chennai District; Hybrid; INR 1,500,000 - 2,500,000; Full time

Benefits offered by this job

Monthly Wellness Reimbursement Program

Monthly Office Commutation Reimbursement Program

Day off on the 3rd Friday of every month

Job summary

Forbes Advisor is looking for a DevSecOps Staff Engineer to design and maintain secure CI/CD pipelines for its operations. This role involves implementing security controls across various cloud platforms like AWS and GCP and mentoring engineers on security best practices.

The ideal candidate should have a Bachelor's degree, extensive experience with AWS, and be proficient in security tools and scripting languages. The position includes benefits such as a monthly wellness reimbursement program and guaranteed long weekends.

Qualifications

• 10+ years of overall industry experience with AWS Certified - Security Specialist.
• Implementation experience with security tools related to SAST, DAST, and Pen Testing.
• 5+ years with AWS technologies emphasizing best practice cloud security.

Responsibilities

• Design and build secure CI/CD pipelines utilizing DevSecOps principles.
• Integrate security tools within pipelines for automated application deployment.
• Automate compliance processes by collaborating with DevOps teams.

Skills

Implementation of security tools and processes

Scripting languages (Python, Bash)

Knowledge in Kubernetes/Docker

DevSecOps principles and practices

Education

Bachelor's degree in CS or related field

Tools

AWS technologies (EC2, RDS, etc.)

CI/CD tools (GitHub Actions, Jenkins)

Security tools (SAST, DAST)

Terraform/Ansible/Chef/Puppet

Job description

Forbes Advisor is a new initiative for consumers under the Forbes Marketplace umbrella that provides journalist- and expert-written insights, news and reviews on all things personal finance, health, business, and everyday life decisions. We do this by providing consumers with the knowledge and research they need to make informed decisions they can feel confident in, so they can get back to doing the things they care about most.

A DevSecOps Staff Engineer integrates security into DevOps practices, designing secure CI/CD pipelines, building and automating secure cloud infrastructure and ensuring compliance across development, operations, and security teams.

Responsibilities

• Design, build and maintain secure CI/CD pipelines utilizing DevSecOps principles and practices to increase automation and reduce human involvement in the process
• Integrate tools of SAST, DAST, SCA, etc. within pipelines to enable automated application building, testing, securing and deployment.
• Implement security controls for cloud platforms (AWS, GCP), including IAM, container security (EKS/ECS), and data encryption for services like S3 or BigQuery, etc.
• Automate vulnerability scanning, monitoring, and compliance processes by collaborating with DevOps and Development teams to minimize risks in deployment pipelines.
• Suggesting architecture improvements, recommending process improvements.
• Review cloud deployment architectures and implement required security controls.
• Mentor other engineers on security practices and processes.

Requirements

• Bachelor's degree, preferably in CS or a related field, or equivalent experience
• 10+ years of overall industry experience with AWS Certified - Security Specialist.
• Must have implementation experience using security tools and processes related to SAST, DAST and Pen Testing
• AWS-specific: 5+ years’ experience with using a broad range of AWS technologies (e.g. EC2, RDS, ELB, S3, VPC, CloudWatch) to develop and maintain an Amazon AWS based cloud solution, with an emphasis on best practice cloud security.
• Experienced with CI/CD tool chain (GitHub Actions, Packages, Jenkins, etc.)
• Passionate about solving security challenges and being informed of available and emerging security threats and various security technologies.
• Must be familiar with the OWASP Top 10 Security Risks and Controls
• Good skills in at least one or more scripting languages: Python, Bash
• Good knowledge in Kubernetes, Docker Swarm or other cluster management software.
• Willing to work in shifts as required

Good to Have

• Observability: Experience with system monitoring tools (e.g. CloudWatch, New Relic, etc.).
• Experience with Terraform/Ansible/Chef/Puppet
• Operating Systems: Windows and Linux system administration.
• Day off on the 3rd Friday of every month (one long weekend each month)
• Monthly Wellness Reimbursement Program to promote health well-being
• Monthly Office Commutation Reimbursement Program