Development Security Operations Engineer, Development and Operations Engineer, Operations Engineer

A Fashion company.
Key Responsibilities
* Project Leadership: Provide technical guidance for front and
backend developers in adopting secure practices/standards
(NIST) and fostering a culture of security - allowing it to be
seamlessly integrating to not be a blocker.
* Subject Matter Expertise: Demonstrate expertise in secure
practice before project starts and through to the acquisition of
new security related tools.
* Tooling Implementation: Implement tooling for SAST and DAST,
use to guide best practices and improve Secure Software
Development Lifecycle policies and procedures.
* Vulnerability Assessment: Performing vulnerability assessments
with our CDR/DSPM to ensure the identification and mitigation
of security threats and compliance with PCI DSS.
* Incident Management: Carry out working parties and incident
management to address security issues promptly.
* Shift Left Integration: Integrating security tooling early into the
continuous delivery pipeline, focus on shift left.
* Security Monitoring: Analysing security monitoring outputs and
coordinating Remediation Patching using tools like Orca.
* Education Initiatives: Establish educational sessions on OWASP
Top Ten to raise awareness of InfoSec objectives throughout the
business.
* Cloud Environment Protection: Improving deployment tools and
processes to enhance cloud environment protection, focusing
on AWS working with trusted parties. AWS services such as
WAF, Security Hub and GuardDuty.
* Vulnerability Review: Reviewing and analysing vulnerabilities
linked with data, to identify security risks within the organisation's
cloud network, infrastructure, and applications, including
identifying false positives; to subsequently add to the Infosec
Risk Register.
* CI/CD Integration: Integration of security tools (Zed Attack
Proxy) into CI/CD pipelines.
* Secure DevOps Automation: Strong focus on Secure DevOps
Automation to streamline operations. (Making security seamless
and not a bottleneck)

A Geolocation company using 3-word addresses.
Key Responsibilities

* Working with Product and Development teams to build and
maintain infrastructure, deploy systems, and deploy new
services.
* Strong communication skills, Bridging the Tech team with
Infosec to ensure Secure Development Lifecycle is adhered to
in a Micro service environment.
* Being Proficient in AWS, Docker, Kubernetes, Git and GitHub,
Terraform.
* Building/owning, supporting and maintaining, IAC driven
environments; using pipelines (CircleCI)
* Supporting Front and Back End teams with internal requests
* Setting up monitoring (DataDog) and alarms using CloudWatch
and PagerDuty integration.
* Collaborating with InfoSec to implement SDLC and secure ways
of working, through Administrative and technical controls.
o Creating and enforcing policies.
* Initiating initiatives to create infrastructure using a standardised
approach
* Researching vendors and implementing POCs to demonstrate
how a technology serves a business need and accessing risk
inheritance.
* Creating custom re-usable CircleCI orbs to deploy containers to
multiple accounts and regions in AWS
* Automating the deployment of clusters and code using Fluxv2
and CircleCI
* Backing up code base in a repeatable, automated and visible
way
* Reducing cost and "tech debt"

* Tutoring in Python, teaching OOP concepts, Command Line Interface/Unix and various other concepts to
students aged 9 - 15
* Organising multiple students with different work and finding creative ways of conceptualising abstract
ideas
* Providing a patient and interactive teaching style to motivate students
* Achieved successfully teaching one of my student from beginner, they managed to secure a place
and attend cs50.harvard summer AI course.