Senior DevSecOps Analyst

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Execute security protocols throughout the software development lifecycle (DevSecOps);

• Streamline security validations within CI/CD workflows;

• Oversee and address vulnerabilities present in applications and infrastructure;

• Conduct static and dynamic code assessments to discover security weaknesses;

• Set up and configure security solutions for applications and infrastructure;

• Work collaboratively with development, infrastructure, and security teams;

• Establish and uphold security and compliance guidelines;

• Advocate for security training and awareness among technology teams;

• Address security incidents and recommend corrective actions;

• Engage in agile practices including daily stand-ups, planning, reviews, and retrospectives.

⛳️ Requirements

• Extensive experience with DevSecOps methodologies;

• Familiarity with security tools such as SonarQube, Checkmarx, Snyk, and OWASP ZAP;

• Proficiency in CI/CD pipelines (Jenkins, GitLab CI, Azure DevOps, etc.);

• Understanding of containerization and orchestration (Docker, Kubernetes);

• Experience in securing APIs and web applications;

• Knowledge of infrastructure as code (Terraform, Ansible);

• Acquainted with agile frameworks (Scrum, Kanban);

• Background in security monitoring and incident management;

• Strong communication and teamwork abilities.