If you want to develop your career in cybersecurity and work on integrating security into the software development lifecycle, this opportunity will allow you to drive an automated, scalable and continuous DevSecOps model within a large organization.
We'll get to the point; we'll tell you what's not on the web. If you want to know more about de GMV
WHAT CHALLENGE WILL YOU BE TAKING ON?
You will join an Application Security and SSDLC service, helping implement and evolve the DevSecOps model and integrate security controls from the early stages of development.
Your main responsibilities will include:
- Integrating and automating SAST/SCA controls into CI/CD pipelines.
- Configuring, administering and optimizing security tools and onboarding applications into the DevSecOps model.
- Defining and maintaining Security Gates and scanning strategies.
- Analyzing vulnerabilities, managing false positives and performing rule tuning.
- Developing automation and integrations using APIs and scripting.
- Troubleshooting issues across security tools, pipelines and integrations.
- Supporting developers with vulnerability remediation and revalidation.
- Contributing to the continuous improvement of SSDLC controls and the secure management of credentials and secrets.
- You will work in a technical and collaborative environment, helping integrate security into development processes in an automated and continuous way.
WHAT DO WE NEED IN OUR TEAM?
We are looking for a professional with practical experience in Application Security and DevSecOps, particularly integrating SAST/SCA into CI/CD environments.
You should have knowledge of:
- CI/CD, Git and code repositories.
- OWASP Top 10, CWE, CVE and CVSS, as well as vulnerability and false-positive analysis.
- Secure development and SSDLC, including automated controls and Security Gates.
- APIs and scripting, particularly Python, PowerShell or Bash.
- Tool and pipeline integration and troubleshooting.
- Secure management of credentials, tok