Описание
Accountabilities
- Secure CI/CD Pipeline Engineering: Design, implement, maintain, and continuously improve secure CI/CD pipelines, embedding security controls throughout the software development lifecycle, from code commits to production deployment.
- Automated Security Testing: Integrate and manage static application security testing (SAST), dynamic application security testing (DAST), dependency scanning, container scanning, and secrets management tools to detect and address vulnerabilities early.
- Build and Deployment Security: Harden build systems, artifact repositories, deployment tooling, and related infrastructure against common attack vectors, ensuring the integrity and security of software delivery processes.
- Infrastructure-as-Code Security: Review and improve infrastructure-as-code configurations, including Terraform, Kubernetes, and cloud resources, to enforce secure configuration standards and reduce infrastructure risks.
- Cloud and Container Security: Strengthen security controls across cloud environments and containerized workloads, applying best practices to Docker, Kubernetes, and relevant cloud-native services.
- Engineering Partnership: Serve as a security partner to R&D teams, helping developers understand vulnerabilities, prioritize remediation, and make informed security decisions without unnecessarily slowing development.
- Security Automation and Guardrails: Develop automated security checks, reusable tooling, and preventive controls that make secu
Полное описание, компания и ссылка на вакансию — после входа.
ВойтиКонтакты работодателя (email/phone/telegram) скрыты из публичного превью —
отправьте резюме, чтобы мы связали вас напрямую.