DevSecOps Security Engineer
coni+partner AG
full-time
Posted on:
Location Type: Hybrid
Location: Zürich • Switzerland
Visit company websiteExplore more
About the role
- Participation in software development projects of the bank that ensure security and development throughout the entire life cycle, in compliance with best practices and company standards
- Participation in projects in which automation becomes an integral part of every development step, including the creation and improvement of Shell scripts, and security tests are performed as early as possible in the development process to fix vulnerabilities cost-effectively
- Participation in automation projects to optimise the CI/CD pipeline, in which security checks (e.g. scanning code or dependencies) run automatically
- Development and maintenance of important tools and methods such as static application security testing (SAST), software composition analysis (SCA), dynamic application security testing (DAST) and infrastructure as code (IaC) scanning
- Ensuring system speed, reducing risks by early detection of vulnerabilities and achieving cost efficiency by reducing security incidents
- Performing root cause analyses and documenting projects
- Collaborating and continuously exchanging information with the development team
- Continuously monitoring applications for threats
Requirements
- Master's or Bachelor's in computer science or engineering
- Professional experience as a DevSecOps engineer in a bank's IT department or in IT consulting for banks
- Knowledge as a developer in Microsoft environments (e.g. Microsoft .NET Framework)
- Knowledge of logs, ETL, NoSQL databases
- Knowledge of CI/CD tools (e.g. Azure DevOps) and Kubernetes (e.g. Openshift) containerisation and Shell or Openshift scripting
- Knowledge of some of the following tools and technologies, e.g. IDE, IDS, Elasticsearch, Kafka, APIs
- Interest in working with development teams
- Interest in analysing system environments, including from a holistic perspective
- Hands-on mentality
- German and English
Benefits
- Flexible work arrangements
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
DevSecOpsShell scriptingstatic application security testing (SAST)software composition analysis (SCA)dynamic application security testing (DAST)infrastructure as code (IaC)CI/CDMicrosoft .NET FrameworkNoSQL databasesroot cause analysis
Soft skills
collaborationcommunicationanalytical thinkinghands-on mentalityinterest in teamwork
Certifications
Master's in computer scienceBachelor's in engineering