CyberSecurity Engineer (DevSecOps)

About our client:

Our client is pioneer in test automation services, revolutionizing how businesses optimize their testing efforts. Their suite of offerings encompasses cutting-edge web and mobile apps automation testing services, meticulously crafted to guarantee flawless application functionality across diverse devices and platforms.

Backed by a team of seasoned engineers, they don't just offer off-the-shelf solutions— they partner with clients to craft bespoke testing strategies tailored to client's unique needs. From identifying key test scenarios to implementing custom automation frameworks, our client's experts are committed to delivering outcomes that exceed expectations.

By harnessing deep expertise and industry-leading practices, customers entrust our client to ensure their applications undergo thorough testing, guaranteeing reliability, performance, and scalability at every turn.Our client is more than just a service provider; they're strategic ally in navigating the complexities of modern software development, empowering their clients to stay ahead in a rapidly evolving digital landscape.

Requirements

Cyber Security Analytics DevSecOps Engineer

The main accountabilities of the role are:

• Platform Configuration, Development and Optimization – accountable for the development and optimal operation of the platform across Vodafone Group and local markets.
  
• Design and Engineering – evaluation of new design methods and technologies to protect against existing and emerging security threats.
  
• Automation – accountable for the maintenance and development of the continuous integration environment and supporting tooling.
  
• Operational Monitoring – accountable for the design and implementation of an operational monitoring framework based on site reliability engineering principles.
  
  

Core competencies, knowledge and experience:

• Able to demonstrate experience of:
  
• Design, management and maintenance of solutions based on the Elastic Stack (Elasticsearch, Logstash, Kibana, Beats).
  
• Delivering platform operations in a complex & dynamic technology environment.
  
• Strong operational Kubernetes experience.
  
• Developing high quality code (e.g. Python, Bash)
  
• Developing continuous integration / deployment pipelines.
  
• Operational monitoring, preferably in the context of site reliability engineering.
  
• Working in a cloud-native environment using open-source tools.
  
• Developing and maintaining infrastructure-as-code (e.g. Terraform, Ansible)
  
• Cloud platform knowledge (GCP, AWS, Azure)
  
• Using and maintaining automation infrastructure (e.g. Git, CI/CD backend, container registry)
  
• Strong analytical skills to inform effective data driven decisions on service improvement & risk reduction.
  
• Active & compelling engagement of people and stakeholders, across a broad range of internal and external stakeholders, up to and including Cyber Security Leadership Team level.
  
  

Must have technical / professional qualifications:

• Kubernetes
  
• Cloud (preferably GCP)
  
• CI/CD
  
• Git
  
• DevSecOps
  
• Automation tools (eg. Ansible, Terraform)
  
• Operational monitoring (eg. Prometheus)
  
• Linux
  
• Big Data / Analytics (eg. Elastic Stack, Hadoop)
  

Desirable:

• Cyber Security
  
• Security orchestration and automated response (SOAR)
  
• Threat Intelligence (TIP)
  
• Site Reliability Engineering
  
• On-premises experience
  
• Kafka
  
• Identity Management
  
• Machine Learning / AI
  
• SAFe Agile
  
• DevOps
  
  

Key accountabilities and decision ownership:

• Accountable for the application of CI/CD pipeline principles to the V-SecA environment.
  
• Accountable for implementation and continuous improvement of operational monitoring framework.
  
• Accountable for the integration of platforms to the Elastic Stack infrastructure, following industry best practices.
  
• Serve as Subject Matter Expert for the Elastic Stack providing guidance and advice on technology and support for the definition and implementation of the roadmap.
  
• Supporting the evaluation of new design methods and technologies to protect against existing and emerging security threats.
  
• Engage with Security Architecture and Security Design teams to define and develop automated capabilities.
  
• Work cooperatively within the Security Operations Centre and other Cyber Security teams to establish and maintain a strong and supportive relationship with customers.