Security Engineer: DevSecOps & Cloud Automation Leader

Ampstek; Göteborgs kommun; On-site; SEK 900,000 - 1,300,000; Full time

Job summary

Ampstek is seeking a Security Engineer to join the DSO Team and drive secure engineering throughout the SDLC. You will define security processes, create hardening guides, and document policies while integrating, configuring and managing security tools to enable DevSecOps practices.

The role emphasizes security testing across SAST/DAST, container security, and automation within CI/CD pipelines, leveraging Azure Cloud, Azure DevOps and GitHub for pipelines and monitoring.

Qualifications

• 6+ years of experience securing infrastructure in Azure or AWS via automation.
• 2+ years of experience in vulnerability management, risk management, etc.
• 3+ years of experience as developer and Security Engineering
• Experience implementing security monitoring, logging and alerting

Responsibilities

• Provide security expertise and guidance to the DSO teams and Enablement teams.
• Document and drive the adoption of secure engineering best practices.
• Develop and evolve policies around information security.
• Develop scripts to automate security processes.
• Document the use of security tools and processes.
• Establish mechanisms and tools for security automatization within the SDLC

Skills

Security testing

DevSecOps

CI/CD pipelines

Azure DevOps

GitHub

Docker

Kubernetes

Container security

Agile methodologies

Vulnerability management

Risk management

Monitoring and alerting

Tools

Fortify

Web Inspect

Fortify SSC

Nexus IQ

Prisma Cloud

Job description

Ampstek is seeking a Security Engineer to join the DSO Team and drive secure engineering throughout the SDLC. You will define security processes, create hardening guides, and document policies while integrating, configuring and managing security tools to enable DevSecOps practices.

The role emphasizes security testing across SAST/DAST, container security, and automation within CI/CD pipelines, leveraging Azure Cloud, Azure DevOps and GitHub for pipelines and monitoring.