Description
As part of its information system overhaul project, our client is looking for an experienced DevSecOps engineer to join its teams. The candidate will have significant experience in securing CI/CD pipelines, cloud environments, and expertise in Kubernetes. The candidate will play a key role in protecting applications and systems throughout the development cycle.
Main Responsibilities:
Required Skills:
Qualifications:
Main Responsibilities:
- Kubernetes Security Management: Configure and maintain the security of Kubernetes clusters (network policies, secrets, activity monitoring, etc.).
- Development and Optimization of Secure CI/CD Pipelines to automate deployments and security tests.
- Management of Incident Detection and Response Systems using tools such as Prometheus, Grafana, etc.
- Implementation of Secure Solutions for Secret and Access Management with Vault.
- Compliance of Environments with Security Standards (ISO 27001, PCI-DSS, GDPR, etc.) by conducting regular audits and documenting processes.
- Collaboration with Development and Infrastructure Teams to integrate security at every stage of the application lifecycle.
- Analysis and Response to Security Incidents by implementing fixes and making recommendations to strengthen resilience.
- Training and Awareness of Internal Teams on security best practices, particularly around Kubernetes and containers.
Required Skills:
- Expertise in Kubernetes.
- Significant experience in CI/CD and integrating security into these pipelines.
- In-depth knowledge of application security principles (OWASP, Zero Trust, etc.).
- Proficiency in configuration management and automation tools (Terraform, Ansible, etc.).
- Knowledge of containerization technologies: Docker, Kubernetes, and associated tools.
- Ability to implement monitoring and alerting solutions (Prometheus, Grafana).
- Good knowledge of security testing: vulnerability scanning, penetration testing, network security.
- Familiarity with DevSecOps security tools.
Qualifications:
- 3 to 5 years of experience in DevSecOps or a similar role.
- Kubernetes certifications and cloud security skills (AWS Certified Security, etc.) are a plus.
- Team spirit, proactivity, and ability to work independently.
- Ability to solve complex problems quickly and efficiently.