Security (Information & Communication Technology) Launch Recruitment are working with an exciting organisation going through a large scale digital transformation project.
The DevSecOps Engineer plays a critical role in overseeing the security, development and operation aspects of the digital development lifecycle and environment.
Salary: $160,000 - $170,000 plus super (12.5%)
Location: Melbourne
Hybrid working: 3 days in the office, 2 days from home - Wednesday in the office
The DevSecOps Engineer will have a deep understanding of DevSecOps principles along with expertise in cyber security practices.
Effectively communicating complex technical concepts across different teams while driving initiatives to enhance overall security posture within a dynamic development environment.
Reporting to the Cyber Security Manager you will work closely across the environment and with the wider IT team.
ResponsibilitiesLeading the implementation and maintenance of DevSecOps best practices within the business.Collaborating with development, operations, and security teams to integrate security controls into the software delivery process.Providing expertise in secure coding practices, vulnerability management, and threat modelling.Developing and maintaining automated security testing processes and tooling to identify and remediate vulnerabilities throughout the software development lifecycle.Managing and enhancing security toolsets for continuous monitoring and alerting, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Interactive Application Security Testing (IAST), and Run-Time Application Security Protection (RASP) tooling.Participating in incident response activities and leading efforts to improve overall system resilience.Evaluating new technologies and tools to enhance the organisation's security posture.Mentoring team members on secure coding practices and promoting a culture of security awareness within the organisation.Overseeing the creation of security policies and procedures and maintaining documentation of security measures.Collaborating with stakeholders to select and implement DevSecOps tools and technologies.Continuously improving DevSecOps processes and staying updated with emerging trends.Skills and Experience RequiredAzure Certifications such as:Microsoft Certified: Azure Developer AssociateMicrosoft Certified: Azure Solutions Architect ExpertMicrosoft Certified: Azure DevOps Engineer ExpertPrior experience working within a DevSecOps team or implementing DevSecOps practices in an organisation.Demonstrated success in designing and implementing scalable, secure, and resilient infrastructure solutions.Proven track record of automating manual processes to improve efficiency and reliability.Experience with application and infrastructure security advantageous.Experience working with agile methodologies and participating in agile ceremonies.In-depth knowledge of security frameworks, tools, and programming languages.Proficiency in scripting and automation using tools such as Ansible, Puppet, or Chef.Expertise in containerization technologies like Docker and Kubernetes.Ability to implement continuous integration/continuous delivery (CI/CD) pipelines.Familiarity with infrastructure as code (IaC) concepts and tools like Terraform or CloudFormation.Knowledge of security best practices in DevOps environments.If you are interested in speaking to someone further, please reach out to Sophie Garrison: Cyber Security and GRC Specialist: ******
#J-18808-Ljbffr