Key Responsibilities:
- Vulnerability Management : Identifying and remediating vulnerabilities in code and device configurations.
- Risk Assessment : Assessing and managing risks to acceptable levels.
- Collaboration : Working with various teams, including Security Operations and Governance, Risk, and Compliance.
- DevSecOps : Understanding and implementing DevSecOps processes.
- Threat Hunting : Promoting and championing threat hunting activities.
Essential Skills and Experience:
- Experience : 5-15 years in a security operations role, with DevSecOps experience.
- Agile Methodologies : Understanding Agile ways of working.
- Technical Knowledge : Proficiency in application security, network security, cloud technologies, and security governance.
- Programming : Experience with languages like Java, C++, Node, BASH, Python.
- Tools : Familiarity with CI/CD pipelines, security automation, and GitLab.
Desirable Qualifications:
- Certifications : CISA, CISM, ISO27001 lead auditor, or CISSP.
- Regulatory Knowledge : Understanding of UNECE Regulation No. 155.