SISO – Insurance
Outside IR35
Hybrid working
As a SISO, you will also play a crucial role in DevSecOps principles into our organization’s security strategy. DevSecOps is a vital component of modern information security, and your responsibilities will extend to this area as well. Your engagement in DevSecOps practices will help ensure that security is not only a priority but also an integral part of the software development and deployment process.
Responsibilities:
DevSecOps: Collaborate with development and operations teams to integrate security throughout the software development lifecycle. Champion the adoption of DevSecOps practices, including security automation and continuous monitoring.
Security as Code: Promote the concept of “security as code” by encouraging the implementation of security controls within the development pipeline. Work closely with developers to incorporate security measures into their code and scripts.
Continuous Security Testing: Implement automated security testing processes, including static application security testing (SAST), dynamic application security testing (DAST), and container security scanning. Ensure that vulnerabilities are detected and addressed early in the development process.
Security Toolchain: Oversee the selection and management of security tools and technologies to support DevSecOps practices. Evaluate and recommend tools that facilitate automated security testing, vulnerability scanning, and code analysis.
Collaborative Culture: Foster a collaborative culture between development, security, and operations teams to enhance security awareness and cooperation. Encourage knowledge sharing and cross-training to bridge the gap between traditionally separate roles.
Security in Deployment Pipelines: Ensure that security checks are integrated into deployment pipelines, including continuous integration and continuous deployment (CI/CD) pipelines. Verify that every change to the codebase undergoes security scrutiny.
Qualifications:
In-depth knowledge of DevSecOps principles, practices, and tools. Proven experience in implementing security in DevOps pipelines and advocating for the DevSecOps culture.
Experience with security automation tools, such as Jenkins, GitLab CI/CD, and relevant security plugins and integrations.
Understanding of containerization and orchestration platforms (e.g., Docker, Kubernetes) and their associated security challenges.
Familiarity with infrastructure as code (IaC) and the ability to evaluate security configurations in code scripts (e.g., Terraform, Ansible).
Strong communication and collaboration skills to facilitate cooperation between development, security, and operations teams.
Additional certifications like Certified DevSecOps Engineer (CDE), Certified Kubernetes Security Specialist (CKS), or similar credentials are a significant advantage.
Your expertise in DevSecOps will be instrumental in ensuring that security is seamlessly integrated into our software development processes, helping us to deliver secure and reliable solutions to our customers.
Recent Comments