Cognyte

DevSecOps Expert

Cognyte

full-time

Posted on:

Origin:  • 🇮🇳 India

Visit company website
✨ AI Apply
Manual Apply

Job Level

Mid-LevelSenior

Tech Stack

AnsibleAWSAzureCloudGoogle Cloud PlatformGroovyJenkinsKubernetesOpenShiftPythonTerraform

About the role

  • Integrate security best practices into CI/CD pipelines and production deployments across the software development lifecycle.
  • Configure, implement, and manage security tools and automation in CI/CD pipelines to detect vulnerabilities early.
  • Use SAST and DAST tools to automate security testing for code and applications; monitor scans, report findings, and recommend remediation.
  • Continuously enhance and automate security processes to deliver secure software efficiently while minimizing manual intervention.
  • Collaborate closely with architecture, development, and operations teams to make security a shared responsibility.

Requirements

  • 3+ years of experience in DevOps or a similar role focused on integrating security into CI/CD processes.
  • Proven experience implementing and configuring security tools such as SAST, DAST, and other automation tools.
  • Strong hands-on experience with CI/CD tools and languages (e.g., Jenkins, Groovy, Git, Python, Bash) for pipeline automation.
  • Proficiency in cloud-native deployments and management (e.g., Helm, Kustomize), Kubernetes objects, and cluster debugging.
  • Familiarity with Infrastructure as Code (IaC) tools like Terraform and Ansible.
  • Knowledge of CIS benchmark recommendations and system hardening practices.
  • In-depth knowledge of security vulnerabilities (e.g., OWASP Top 10) and mitigation best practices.
  • Experience with vulnerability scanning and static and dynamic application security testing tools (e.g., SonarQube, Checkmarx, OWASP ZAP, Coverity, Lint).
  • Familiarity with on-premises cloud platforms (e.g., OpenShift, Tanzu) and public cloud platforms (AWS, Azure, GCP) and their security configurations.
  • Strong communication skills, problem-solving mindset, and a proactive collaborative approach to fostering a security-first mindset.