- Vulnerability Management: Identifying and remediating vulnerabilities in code and device configurations.
- Risk Assessment: Assessing and managing risks to acceptable levels.
- Collaboration: Working with various teams, including Security Operations and Governance, Risk, and Compliance.
- DevSecOps: Understanding and implementing DevSecOps processes.
- Threat Hunting: Promoting and championing threat hunting activities.
Essential Skills and Experience:
- Experience: 5-15 years in a security operations role, with DevSecOps experience.
- Agile Methodologies: Understanding Agile ways of working.
- Technical Knowledge: Proficiency in application security, network security, cloud technologies, and security governance.
- Programming: Experience with languages like Java, C++, Node, BASH, Python.
- Tools: Familiarity with CI/CD pipelines, security automation, and GitLab.
Desirable Qualifications:
- Certifications: CISA, CISM, ISO27001 lead auditor, or CISSP.
- Regulatory Knowledge: Understanding of UNECE Regulation No. 155.