DevSecOps Security Engineer - CI/CD Automation

HCL Technologies Limited; Göteborgs kommun; On-site; SEK 700,000 - 980,000; Full time

Job summary

HCL Technologies Limited is seeking a Security Expert to join the DSO Team in Gothenburg. You will define and document security processes, create hardening guides and policies, and integrate, configure and manage security tools to enable DevSecOps ways of working.

You will provide security guidance to DSO and Enablement teams, drive secure engineering practices, develop automation scripts, and embed security throughout the SDLC with CI/CD pipelines, Docker/Kubernetes, and Azure.

Qualifications

• 3-5+ years of experience in information security.
• 3-4+ years of experience performing security testing (SAST, SCA, DAST and containers). Preferably experience on Fortify, WebInspect or Fortify SSC; as well as Nexus IQ and Prisma Cloud.
• 3-4+ years of embedding security into CI/CD pipelines.
• 3+ years experience with agile methodologies.
• 3+ years of experience in DevSecOps.
• 2-3+ years experience securing containerized environments (Docker, Kubernetes) and virtual machines.
• 2-3+ years experience with Azure.
• 2+ years of experience with Azure DevOps and GitHub scripting; good communication skills.
• 2-3+ years of securing infrastructure in Azure or AWS via automation (good to have).

Responsibilities

• Provide security expertise and guidance to the DSO teams and Enablement teams.
• Document and drive the adoption of secure engineering best practices.
• Develop and evolve policies around information security.
• Develop scripts to automate security processes.
• Document the use of security tools and processes.
• Establish mechanisms and tools for the security automation within the SDLC.

Skills

Security testing

CI/CD integration

DevSecOps

Docker & Kubernetes

Azure

GitHub scripting

Agile methodologies

Communication skills

Security tooling knowledge

Automation scripting

Tools

Fortify

WebInspect

Fortify SSC

Nexus IQ

Prisma Cloud

Azure DevOps

Kubernetes

Docker

Job description

HCL Technologies Limited is seeking a Security Expert to join the DSO Team in Gothenburg. You will define and document security processes, create hardening guides and policies, and integrate, configure and manage security tools to enable DevSecOps ways of working.

You will provide security guidance to DSO and Enablement teams, drive secure engineering practices, develop automation scripts, and embed security throughout the SDLC with CI/CD pipelines, Docker/Kubernetes, and Azure.