Devsecops

Who We Are

Build a brighter future while learning and growing with a Siemens company at the intersection of technology, community and sustainability. Our global team of innovators is always looking to create meaningful solutions to some of the toughest challenges facing our world. Find out how far your passion can take you.

About The Job

• Design and implement secure cloud infrastructure components and protective measures for applications and data
• Lead infrastructure projects that enhance our security posture and operational efficiency
• Develop automation for security-related workflows and processes
• Identify, prioritize, and address cloud infrastructure security findings through automated and manual processes
• Develop infrastructure as code templates with embedded security controls
• Create automated workflows for security event response and compliance reporting
• Execute security requirements by translating them into technical implementations
• Actively participate in incident response for security events affecting infrastructure
• Provide technical documentation for security architecture and implemented controls
• Stay current with cloud technologies and implementation best practices
• Build and configure secure CI/CD pipelines with integrated security testing and validation
  
  

What you need:

• Bachelors in computer science, cybersecurity, or related discipline; or equivalent work experience
• 3 - 5 years of relevant work experience
• Strong understanding of architectural design patterns from software, security, and cloud infrastructure perspective
• Experience with cloud technologies and services
• 2+ years experience with CI/CD pipelines and tools
• 2+ years coding and scripting experience
• 2+ years cloud administration and infrastructure management
• Security-first DevOps mindset
• Experience with container technologies
• Strong communication skills with ability to collaborate across teams
  
  

Bonus Points:

• Experience implementing security controls throughout the SDLC
• Knowledge of compliance frameworks and security best practices
• Familiarity with NIST frameworks and controls
• Advanced infrastructure as code experience
• Experience with multiple cloud providers
• Experience with infrastructure monitoring and observability tools
• Experience with vulnerability scanning and security testing automation
• Experience with penetration testing
• Knowledge of database administration
• Contributions to open-source projects
• Security certifications
• DevOps certifications
  
  

Technologies:

• AWS
• Terraform, SAM, CDK, CloudFormation, Ansible
• C#, GO, TypeScript, Python, PowerShell, Bash, Groovy
• Jenkins, Tekton, CodeDeploy, CodeCommit
• Docker, PodMan, Kubernetes, OpenShift
• .NET Framework and .NET Core
• SQL Server, DynamoDB, SnowFlake, Postgres
• Continuous Integration and Delivery tools
• Kafka, Kinesis, Elasticsearch
• DataDog, CloudWatch
• Snyk, Wiz
  
  

The Brightly culture

We’re guided by a vision of community that serves the ambitions and wellbeing of all people, and our professional communities are no exception. We model that ideal every day by being supportive, collaborative partners to one another, conscientiously making space for our colleagues to grow and thrive. Our passionate team is driven to create a future where smarter infrastructure protects the environments that shape and connect us all. That brighter future starts with us.

#Brightly

---