Senior Associate, Cloud Security Engineer

Requisition ID: 241557

Thanks for your interest in ScotiaTech, Scotiabank's new and innovative Technology hub in Bogota.

Join a purpose driven winning team that promotes creativity and innovation in a fast-paced environment, where we're always committed to results, in an inclusive, diverse, and high-performing culture.

Purpose
The Senior Security Associate, Cloud and Application Security Engineer will be responsible for working with a diverse team of cloud and application security engineers, leveraging industry leading SDLC and DevSecOps processes to support application security tools and infrastructure mandated by Cloud Security in their mission of protecting the Bank and its customers from external threats.

Contributes to the overall success of the Cloud and Application Security Engineering team with a global focus on code control, and pipeline security, supporting the achievement of the Bank's information security objectives of integrity, confidentiality/privacy, availability, and continuity.

The incumbent is responsible for supporting and upholding the Bank's application change control standards.

Accountabilities

• Provide production support to software development and DevSecOps pipeline teams by responding quickly and professionally to support tickets, engaging with users, and troubleshooting issue to identify the root cause and permanent corrective actions.
• Collaborate in a team environment spanning multiple geographies to support CloudSec and AppSec tools and infrastructure used by the bank.
• Support AppSec SLAs by performing DevOps support activities spanning on-premises, private cloud, and public cloud environments through problem triaging, system administration, and software deployments.
• Support integration of Cloud and Application Security tooling within DevOps pipelines in the bank.
• Work with engineering team peers, vendors and technology teams to maintain security compliance and software currency within tools and infrastructure.
• Understand how the Bank's risk appetite and risk culture should be considered in day-to-day activities and decisions.
• Actively pursues effective and efficient operations of his/her respective areas in accordance with Scotiabank's Values, its Code of Conduct, and the Global Sales Principles, while ensuring the adequacy, adherence to, and effectiveness of day-to-day business controls to meet obligations with respect to operational, compliance, AML/ATF/sanctions and conduct risk.
• Champions a high-performance environment and contributes to an inclusive work environment.

Education / Experience

• 1-2 years' experience working within a technology function and/or security capacity.
• Strong ability to learn quickly about new technologies, processes, procedures, capabilities, and functions.
• Ability to perform system administration activities, follow and create technical documentation to support users of Application Security tools including CI/CD pipeline teams and various AppSec teams in the bank.

• Ability to learn relatively complex systems on the job and effectively communicate with teams of varying technical skills to triage and resolve issues experienced in tools and environments.

• Experience with administration of Windows and Linux systems is required.

• Knowledge and understanding of basic networking terminology, usage, process, protocols.
• Basic understanding of public cloud offerings, features, capabilities (GCP or Azure).
• Coding and scripting experience in Python, Bash, PowerShell, or Java.
• Working knowledge of Agile methodologies and tools is required.
• Experience with Linux, Windows, and database systems (Oracle, Postgres, Sybase, etc.) is an asset
• Experience with DevOps and build tools for continuous integration (GIT, Jenkins, Azure DevOps, etc.)

• Experience or knowledge of application security tools/processes including one or more of the following is an asset

• Aqua Sec, Fortify WebInspect, Fortify Software Security Center, Fortify Static Code Analyzer, Black Duck, NowSecure Platform.

• Excellent organization, time management, problem-solving, and analytical skills

Location(s): Colombia : Bogota : Bogota

ScotiaTech is a business unit within ScotiaGBS, a Scotiabank Group company located in Bogota, Colombia. The ScotiaTech hub was created to support different technology systems and processes of the Bank. We offer an inclusive, positive work environment, and competitive benefits.

At ScotiaTech, we value the unique skills and experiences each individual brings and are committed to creating and maintaining an inclusive and accessible environment for everyone. Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at ScotiaTech; however, only those candidates who are selected for an interview will be contacted.

Note: All postings in will remain live for a minimum of 5 days.