DevSecOps Engineer

E.K. Solutions Pvt. ltd

EKbana Solutions is R&D focused company with proven track record of delivering quality solutions to Global Clients. We work on latest technology and provide solutions to upcoming tech companies in US, Japan, Singapore and Nepal. Being focused on R&D, we always invest/work in latest global trends and encourage our team members to come-up with new ideas to create better solutions. We relentlessly encourage our team members to work in latest technology and upgrade team's knowledge by providing best possible learning tools.

Job Descriptions

• ·         Responsible for  DevSecOps areas of Vulnerability Scanning, Certificate Management, Password Policy Management, Data   Analysis of security monitoring outputs, coordination of Remediation Patching, and other daily Security and Compliance efforts.

• ·         Assisting in developing an automated security framework for robust deployment tools and processes, leveraging various     scripting languages and open source solutions.

• ·          To coordinate and perform vulnerability assessments through the use of automated and manual tools (Tenable, NMAP, OpenVas etc).

• ·         Review and analyze vulnerability data to identify security risks to the organization's network, infrastructure, and application's and determine any reported vulnerabilities that are false positives.

• ·         Preparing security vulnerability and risk management reports as required.

• ·         Comprehension in the security areas of Key Management Systems, Certificate Management, Encryption, Penetration Testing, Vulnerability Scanning, Security and Monitoring tools, etc.

• ·         Work Closely with APIs and Plugins to integrate security tools into established CI/CD pipelines.

• ·         Configuring, implementing and leveraging computer security and networking diagnostic/monitoring tools.

Job Specifications

• Bachelor's Degree in Computer Science or related field.

• Prior experience 2+ years, working as linux system engineer, DevOps Engineer, DevSecOps Engineer, Security Engineer. 

• Experience with security automation and machine learning.

• Familiarity with Cloud Service Provider Amazon AWS, GCP, Digital Ocean and Azure.

• Prior experience with Developers, DevOps, and Engineering teams in a dynamic environment to promote/implement the DevSecOps program throughout the organization.

• Proficiency Bash, Python or other scripting languages.

• Familiarity with Information Security frameworks/standards (i.e. CIS, NIST, RFC2196, etc).

• Knowledge of Windows and Linux patch management and related information security functions (authentication, encryption, iptables, SSL, Ciphers, etc)

• Strive for continuous improvement and build continuous integration, continuous development, and constant deployment pipeline (CI/CD Pipeline)