Security Engineer

HCL Technologies Limited; Göteborgs kommun; On-site; SEK 700,000 - 980,000; Full time

Job summary

HCL Technologies Limited is seeking a Security Expert to join the DSO Team in Gothenburg. You will define and document security processes, create hardening guides and policies, and integrate, configure and manage security tools to enable DevSecOps ways of working.

You will provide security guidance to DSO and Enablement teams, drive secure engineering practices, develop automation scripts, and embed security throughout the SDLC with CI/CD pipelines, Docker/Kubernetes, and Azure.

Qualifications

• 3-5+ years of experience in information security.
• 3-4+ years of experience performing security testing (SAST, SCA, DAST and containers). Preferably experience on Fortify, WebInspect or Fortify SSC; as well as Nexus IQ and Prisma Cloud.
• 3-4+ years of embedding security into CI/CD pipelines.
• 3+ years experience with agile methodologies.
• 3+ years of experience in DevSecOps.
• 2-3+ years experience securing containerized environments (Docker, Kubernetes) and virtual machines.
• 2-3+ years experience with Azure.
• 2+ years of experience with Azure DevOps and GitHub scripting; good communication skills.
• 2-3+ years of securing infrastructure in Azure or AWS via automation (good to have).

Responsibilities

• Provide security expertise and guidance to the DSO teams and Enablement teams.
• Document and drive the adoption of secure engineering best practices.
• Develop and evolve policies around information security.
• Develop scripts to automate security processes.
• Document the use of security tools and processes.
• Establish mechanisms and tools for the security automation within the SDLC.

Skills

Security testing

CI/CD integration

DevSecOps

Docker & Kubernetes

Azure

GitHub scripting

Agile methodologies

Communication skills

Security tooling knowledge

Automation scripting

Tools

Fortify

WebInspect

Fortify SSC

Nexus IQ

Prisma Cloud

Azure DevOps

Kubernetes

Docker

Job description

The Security Expert will be part of the DSO Team and be responsible for defining and documenting security processes, creating hardening guides and policies, and integrate, configure and manage security tools to facilitate the future DevSecOps ways of working.

The typical tasks includes:

• Provide security expertise and guidance to the DSO teams and Enablement teams.
• Document and drive the adoption of secure engineering best practices.
• Develop and evolve policies around information security.
• Develop scripts to automate security processes.
• Document the use of security tools and processes.
• Establish mechanisms and tools for the security automatization within the SDLC

Must have:

• 3-5+ years of experience in the information security field
• 3-4+ years of experience performing security testing (SAST, SCA, DAST and security on containers). Preferably experience on Microfocus products as Fortify, WebInspect or Fortify SSC. As well as Sonatype Nexus IQ and Prisma Cloud
• 3-4+ years of experience with embedding security into CI/CD pipelines
• 3+ years experience with agile methodologies
• 3+ years of experience in DevSecOps
• 2-3+ years of experience with securing containerized environments (Docker, Kubernetes) and virtual machines.
• 2-3+ years experience with Azure
• 2+ years of experience with Azure DevOps and GitHub Scripting skills Good communication skills

Good to have:

• 2-3+ years of experience securing infrastructure in Azure (Best) or AWS via automation
• 2+ years of experience in vulnerability management, risk management, etc.
• 3+ years of experience as developer Experience implementing security monitoring, logging and alerting