DevSecOps Specialist M/F in Bucuresti

Mission Collaborate with development and operations teams to integrate security practices into the SDLC, ensuring that security is not an afterthought but an integral part of the process.Design, implement, and maintain security controls and solutions to mitigate potential vulnerabilities and risks in software applications and infrastructure.Develop and enforce security policies, standards, and procedures to ensure compliance with industry best practices and regulatory requirements.Perform security testing and vulnerability assessments, identifying potential weaknesses and recommending remediation measures.Implement and manage security automation tools and processes to streamline security tasks and enhance efficiency.Monitor and analyze security logs, events, and alerts to identify and respond to security incidents promptly.Collaborate with software development teams to incorporate secure coding practices and conduct secure code reviews.Stay updated with the latest security trends, vulnerabilities, and emerging technologies, providing recommendations for improvement where necessary.Conduct security awareness training and education sessions for development and operations teams to promote a security-focused culture.Participate in incident response activities, investigating and resolving security incidents, and documenting lessons learned.Bachelor's degree in Computer Science, Information Security, or a related field.Relevant certifications such as CISSP, CEH or OSCP are nice to have.Proven experience in software development, systems administration, or network engineering, with a deep understanding of SDLC processes and methodologies.Strong knowledge of cybersecurity principles, secure coding practices, and common security vulnerabilities.Proficiency in scripting languages such as Python or PowerShell to automate security tasks.Experience with security tools and technologies, including vulnerability scanners, penetration testing tools, and security information and event management (SIEM) systems.Experience with cloud platforms (AWS, GCP, OCI).Containerization technologies (Docker, Kubernetes) are a plus.Good knowledge of infrastructure as code Terraform, integration with Jenkins and GitLab.Excellent problem-solving and analytical skills, with the ability to identify and address security risks effectively.Strong communication and collaboration skills to work effectively with cross-functional teams and stakeholders.Ability to adapt to fast-paced environments and effectively prioritize and manage multiple tasks.Demonstrated commitment to continuous learning and staying updated with the latest cybersecurity trends and technologies. Profile Bachelor's degree in Computer Science, Information Security, or a related field.Relevant certifications such as CISSP, CEH or OSCP are nice to have.Proven experience in software development, systems administration, or network engineering, with a deep understanding of SDLC processes and methodologies.Strong knowledge of cybersecurity principles, secure coding practices, and common security vulnerabilities.Proficiency in scripting languages such as Python or PowerShell to automate security tasks.Experience with security tools and technologies, including vulnerability scanners, penetration testing tools, and security information and event management (SIEM) systems.Experience with cloud platforms (AWS, GCP, OCI). Containerization technologies (Docker, Kubernetes) are a plus.Good knowledge of infrastructure as code Terraform, integration with Jenkins and GitLab.Excellent problem-solving and analytical skills, with the ability to identify and address security risks effectively.Strong communication and collaboration skills to work effectively with cross-functional teams and stakeholders.Ability to adapt to fast-paced environments and effectively prioritize and manage multiple tasks.Demonstrated commitment to continuous learning and staying updated with the latest cybersecurity trends and technologies.