Division: Internal and Information Security

Working schedule: 5 days a week, from 09:00 to 18:00. Based on nature of the work you will be able to work from office and from home

Deadline to apply:  30.11.2022

DevSecOps Engineer acts as a contact point for all efforts to secure information systems at Company. DevSecOps Engineer also coordinates efforts to integrate information systems security plans with business strategic and operational plans.

The purpose of this position is to assist in maintaining development security for Company through continued DevOps monitoring, maintaining a network review program, testing control parameters, and educating team members on traditional and emerging threats as well as best practices.

Your main job responsibilities:

• Installs, configures, troubleshoots, and maintains server and systems configurations (hardware and software) in Information Security environment and in supportive security systems to ensure their confidentiality, integrity, and availability. Administers server-based systems, security devices, distributed applications, network storage, messaging, and performs systems monitoring. Consults on network, application, and customer service issues to support computer systems’ security and sustainability
• Installs, configures, tests, operates, maintains, and manages network devices including hardware, software, and operating systems within Information Security environment  that permit information sharing across the full spectrum of transmission using all media. Supports the security of information and information systems
• Conduct analysis of log files, evidence, and other information in order to determine best methods for identifying the perpetrator(s) of a network intrusion
• Conduct large-scale investigations of criminal activities involving complicated computer programs and networks
• Administer Enterprise Network Defense (END) test bed(s), and test and evaluate new cyber defense applications, rules/signatures, access controls, and configurations of platforms managed by service provider(s)
• Coordinate with Enterprise Network Defense (END) Analysts to manage and administer the updating of rules and signatures (e.g., intrusion detection/protection systems, anti-virus, and content blacklists) for specialized cyber defense applications
• Implement Risk Management Framework (RMF)/Security Assessment and Authorization (SA&A) requirements for specialized Enterprise Network Defense (END) systems within the enterprise, and document and maintain records for them.
• Perform system administration on specialized Enterprise Network Defense (END) applications and systems (e.g., anti-virus, audit and remediation) to include installation, configuration, maintenance, backup and restoration
• Assist in perform analysis of log files from a variety of sources (e.g., individual host logs, network traffic logs, firewall logs, and intrusion detection system [IDS] logs) to identify possible threats to network security
• Assist in perform command and control functions in response to incidents
• Conducts and documents the systems integration, testing, operations, maintenance, and security of an information security environment and of DevSecOps systems in relevance. Coordinates threat and mitigation strategies across the enterprise.
• Develop centralized cryptographic key management capability
• Identify functional- and security-related features to find opportunities for new capability development to exploit or mitigate cyberspace vulnerabilities