Junior Security DevOps (000002)
About us: FORT is a leading IT consultancy company that has high level of experience both in the Romanian market and abroad. We aim to provide top of the line solutions for our clients, helping them to achieve their goals in terms of productivity and digitization. The Security DevOps consultant position is highly important for our organization, and it combines great technical skills with a high attention to details.
Job Description: Our future colleague will need to tackle various tasks related to DevOps and software development processes, as required by our customers. The position also implies an active involvement in the security aspects of the software development life cycle. All activities will be managed by the Security DevOps team lead and will be in accordance with the client's strategic objectives. Since FORT poses a high emphasis on quality of services, various training and certification paths will play a crucial role for the professional development for the person that will become part of our team.
Specific Responsibilities:
The Junior Security DevOps Consultant is in charge or various DevOps and Security related tasks. Given this mail goal, the role includes the following responsibilities:
- Clarify technical requirements with key stakeholders;
- Actively participate in technical meetings, with the aim of clarifying certain DevOps and Security issues;
- Install, configure and manage various security applications, developed by various 3rd party companies;
- Implement DevOps specific processes (CI/CD);
- Application testing in order to uncover main security vulnerabilities;
- Infrastructure vulnerability assessments, as required by different projects;
- Provide assistance to our customers related to the software implementation life cycle;
- Generate and provide various reports as asked by the client's management team;
- Writing and reviewing various technical and security documents;
- Following up on topics and ensuring that proposed deadlines are met;
- Support handover to colleagues from the Client's software development team;
- Helping organizations take on modern security challenges as they shift security to the left in DevOps.
- Assisting clients on DevSecOps Methodology, infrastructure, people, process and governance
- Implementation of industry leading practices and capabilities around DevSecOps for clients.
Professional requirements:
- Expertise in cloud and virtualization platforms
- 2+ years of experience in agile development or DevOps role
- Infrastructure automation knowledge (Ansible/Chef/Puppet, Terraform, Docker etc)
- Application hosting knowledge (Docker Swarm/Kubernetes/OpenShit etc.)
- Experience in design and architecting enterprise and/or web-scale hosting platforms
- Assessment capabilities in either of the following: Vulnerability Management, PCI DSS, SOC2 & ISO Assessments
- General knowledge of infrastructure concepts (mainly networking and servers)
- Good understanding of server services (web servers, databases etc.)
- Experience with any "mainstream" programming language (.NET, Java, Python, etc.)
- Experience in using application security testing tools (SAST, DAST, IAST, OSA, or similar) would be considered a major plus
- Integration of Security testing tools into CI/CD pipeline
Soft Skills:
- Excellent communicative skills;
- Great presentation skills;
- Friendly and enthusiastic;
- Go getter attitude;
- Fast learner;
- Passionate about the IT industry as a whole and about software applications in particular;
- English is a must;
- Well organized;
- Good stress management;
- Able to work under pressure.
Our offer:
- Good remuneration package;
- Full-time job with flexible schedule;
- Remote work, but with the possibility to go to the office (One Park Cotroceni Offices);
- Individual career path - personal training on the maintained technologies; management and technical career growth, enhanced by learning and development program; personal certification plan paid by the company and great source of technical articles and support information;
- Virtual library of soft skills training in several areas;
- Strong company culture and a great team of skilled colleagues; strong team spirit with multiple initiatives involved.
