Cloud Security DevSecOps Engineer

hace 2 días

Bogotá, Colombia SOS Trabajo A tiempo completo

Job Type

Full Time

General Description

Responsible for analysis, design and implementation coordination for tool and service designs within the cloud security & identity domain. Securing software built and maintained by Popular. Work closely with in-house software development teams and vendors/third-party organizations to ensure that security, privacy, and compliance requirements are planned for, designed, and built into software applications. In addition to securing software, will be expected to understand cloud computing principles, including virtualization, containerization, microservices and serverless computing. Risk management, security, container security, Kubernetes security, IAM security, network security, encryption, secrets management, data protection & securing CI/CD. Its key to maintain industry and cyber knowledge to optimize and align Populars application security processes and systems throughout the Software Development Lifecycle.

Essential Duties and Responsibilities

  • Complete hands-on experience with Terraform, Packer, Ansible, Json for hardening images and CI/CD pipelines.
  • Deep knowledge of securing APIs and Microservices platform
  • Hands on experience with IAM Policy as code; OPA (Open Policy Agent); Cedar AWS opensource policy agent
  • Expertise in Dev-Ops, CI/CD, and full life cycle management
  • Experience working in DevSecOps, including knowledge and experience enforcing a secure software development lifecycle. (Github, Gitlab, Jenkins ,Ansible, Chef,Puppet)
  • Experience using scripting languages (Python, Powershell, Bash etc.) to parse machine generated data, interact with REST APIs, and automate repetitive tasks.
  • Identify solutions for common security problems while participating as a security specialist in an agile Application Security team.
  • Work on security reviews, building relationships with software architects, developers, and engineers.
  • Design and develop accelerators, security APIs, pipeline security automation.
  • Developing and embedding secure design patterns, coding standards, education, and culture into the development community.
  • Build, deploy, and automate comprehensive application security testing capabilities.
  • Application security assessments, including code reviews, architecture reviews, threat modeling, and penetration testing.
  • Act as an advocate and resource for secure software development and application security practices in all application life cycle phases.
  • Promote API security design principles and perform API security reviews.
  • Assists cyber incident triage, including determining scope, urgency, and potential impact, identifying the application code's specific vulnerability. Makes recommendations that enable expeditious remediation.

Education

Bachelor's degree in computer science, computer engineering, information systems, software engineering, or related field.

Experience

  • 5 (five) years of experience working in security aspects of software engineering in a complex technology environment.

Certifications and Licenses

The following Certifications and Licenses are preferred but no required:

  • CISSP, CISM, and AWS.

Knowledge, Skills, and Abilities (KSA'S)

  • Strong business acumen: ability to understand the needs and concerns of business stakeholders and colleagues and respond promptly and effectively to stakeholder requests. Ability to conduct analysis on work procedures, business results and recommends changes to improve the effectiveness of the business's management.
  • Strong technical acumen: knowledge of Information Security and Information Technology concepts. Ability to write technical instructions using programs and technology. Robust knowledge of applicable local and federal laws, regulations, and guidelines.
  • Communication skills: effectively interact with internal and external stakeholders. Ability to foster trusting relationships with colleagues and clients. Highly develop written and verbal communications skills, strong ability to communicate ideas (storytelling). Presents numerical data effectively. Superior communication and interpersonal skills. Excellent report-writing and presentation skills. Polished in preparing presentations, summaries, and reports for all audiences.
  • Analytical skills: Stays focused on main issues, prevents irrelevant issues or distractions from interfering with timely completion of assignments. Collects, research and complements data; Synthesizes complex or diverse information. Demonstrates attention to detail; Applies design principles; Generate creative solutions. Strong quantitative, research and analytical skills. Experience with data analysis, persuasive and informative writing, workload management, and process management.
  • Problem Solving: Identifies and resolves problems in a timely manner; Develops alternative solutions.
  • Project Management: Ability to prioritize and work with multiple projects and tasks with minimum supervision; self-direct and task switch between strategic and tactical initiatives regularly. Capacity to achieve results according to plan ensuring the expected quality. Excellent organization capacity to define priorities, meet deadlines, and flexible to change. Knowledge on project coordination, identification of business needs, work plan, budget control, time management, resource allocation, team management and status reports. Must demonstrate leadership, logic, and reasoning skills.
  • Operational/Regulations Processes: Knowledge on budget administration, resources allocation, organizations policies, and regulations. Ability to establish, conduct and track operational processes properly.
  • Computer and Technological Skills: Proficient in MS Office 365. Experience with data management tools such as Power Pivot, Power BI, among others is desired. Ability to achieve results by providing innovative ways of working with operational and technological considerations. Knowledge of computer flow charts and programming logic and codes.

  • Principal Cloud Security Engineer

    hace 7 días

    Bogotá, Cundinamarca, Colombia TTEC A tiempo completo

    Principal Cloud Security Engineer **Principal Cloud Security Engineer** Bringing smiles is what we do at TTECfor you and the customer. As a Cloud Security Principal working in Bogota Colombia, you'll be a part of creating and delivering amazing customer experiences while you also #experienceTTEC, an award-winning employment experience and company...

  • DevSecOps Engineer

    hace 5 días

    Bogotá, Bogotá D.E., Colombia Talan A tiempo completo

    About TalanTalan is an international advisory group on innovation and transformation through technology, with 5000 employees, and a turnover of 600M€.We offer our customers a continuum of services to support you at each key stage of your organization's transformation, with 4 main activities:ADVISORY SERVICES in management and innovation : supporting...

  • Senior DevSecOps Engineer

    hace 5 días

    Bogotá, Bogotá D.E., Colombia Talan A tiempo completo

    About TalanTalan is an international advisory group on innovation and transformation through technology, with 5000 employees, and a turnover of 600M€.We offer our customers a continuum of services to support you at each key stage of your organization's transformation, with 4 main activities:ADVISORY SERVICES in management and innovation : supporting...

  • Cloud Security DevOps Engineer

    hace 2 días

    Bogotá, Bogotá D.E., Colombia SOS Trabajo A tiempo completo

    About the RoleWe are seeking a highly skilled Cloud Security DevOps Engineer to join our team at SOS Trabajo. As a key member of our security team, you will be responsible for ensuring the security and integrity of our cloud-based systems and applications.Key ResponsibilitiesDesign and implement secure cloud-based systems and applicationsDevelop and maintain...

  • AWS Cloud Security Engineer

    hace 5 días

    Bogotá, Bogotá D.E., Colombia SOS Trabajo A tiempo completo

    About the RoleSOS Trabajo is seeking a highly skilled AWS Cloud Security Engineer to join our team. As a key member of our security team, you will be responsible for ensuring the security and compliance of our cloud-based platforms.Key ResponsibilitiesCloud Security Architecture: Design and implement secure cloud architectures and designs, identifying...

  • DevOps Cloud Engineer

    hace 5 días

    Bogotá, Bogotá D.E., Colombia Charger Logistics A tiempo completo

    Job DescriptionCharger Logistics is a leading asset-based carrier, specializing in delivering assets on time and on budget. With a diverse fleet of equipment, we handle a range of freight, including dedicated loads, specialized hauls, temperature-controlled goods, and HAZMAT cargo.We are expanding and seeking a talented, skilled, and experienced DevOps Cloud...

  • DevOps Cloud Engineer

    hace 19 horas

    Bogotá, Bogotá D.E., Colombia Charger Logistics A tiempo completo

    Job DescriptionCharger Logistics is a world-class asset-based carrier specializing in delivering assets on time and on budget. With a diverse fleet of equipment, we handle a range of freight, including dedicated loads, specialized hauls, temperature-controlled goods, and HAZMAT cargo.We are expanding and seeking a talented, skilled, and experienced DevOps...

  • Cloud Engineer Analyst

    hace 7 días

    Bogotá, Cundinamarca, Colombia Neoris A tiempo completo

    En NEORIS es un acelerador Digital que ayuda a las compañías a entrar en el futuro, teniendo 20 años de experiência como Socios Digitales de algunas de las mayores compañías del mundo. Somos más de 4,000 profesionales en 11 países, con nuestra cultura multicultural de startup en donde cultivamos innovación, aprendizaje continuo para crear soluciones...

  • Cloud Security Architect

    hace 5 días

    Bogotá, Bogotá D.E., Colombia TeleTech Holdings, Inc. A tiempo completo

    Job DescriptionJob Title: Cloud Security ArchitectJob Summary:We are seeking a highly skilled Cloud Security Architect to join our team at TeleTech Holdings, Inc. As a Cloud Security Architect, you will be responsible for designing and implementing secure cloud-based systems, including infrastructure, platforms, and applications.Key Responsibilities:Security...

  • DevOps Cloud Engineer

    hace 2 días

    Bogotá, Bogotá D.E., Colombia Charger Logistics A tiempo completo

    About Charger LogisticsCharger Logistics is a world-class asset-based carrier that specializes in delivering assets on time and on budget. Our diverse fleet of equipment enables us to handle a range of freight, including dedicated loads, specialized hauls, temperature-controlled goods, and HAZMAT cargo.Job SummaryWe are seeking a talented and experienced...

  • Cloud Security Architect

    hace 19 horas

    Bogotá, Bogotá D.E., Colombia SOS Trabajo A tiempo completo

    About the RoleSOS Trabajo is seeking a highly skilled Cloud Security Engineer to join our team. As a Cloud Security Engineer, you will play a critical role in designing and engineering secure cloud solutions and ensuring all security controls and requirements are designed and part of the cloud solution.Key ResponsibilitiesCloud Security Architecture: Assist...

  • Cloud Security Architect

    hace 19 horas

    Bogotá, Bogotá D.E., Colombia TeleTech Holdings, Inc. A tiempo completo

    Job DescriptionJob Title: Cloud Security ArchitectJob Summary:We are seeking a highly skilled Cloud Security Architect to join our team at TeleTech Holdings, Inc. As a Cloud Security Architect, you will be responsible for designing and implementing secure cloud-based systems, including infrastructure, platforms, and applications.Key Responsibilities:Security...

  • Cloud Security Architect

    hace 2 días

    Bogotá, Bogotá D.E., Colombia SOS Trabajo A tiempo completo

    About the RoleSOS Trabajo is seeking a highly skilled Cloud Security Engineer to join our team. As a Cloud Security Engineer, you will play a critical role in designing and engineering secure cloud solutions and ensuring all security controls and requirements are designed and part of the cloud solution.Key ResponsibilitiesSecure Cloud Solutions: Responsible...

  • Cloud Security Threat Engineer

    hace 2 días

    Bogotá, Colombia SOS Trabajo A tiempo completo

    Job Type Full Time General Description Responsible for analysis, design and implementation coordination for tool and service designs within the cloud security & identity domain. Securing software built and maintained by Popular. Work closely with in-house software development teams and vendors/third-party organizations to ensure that security, privacy, and...

  • Cloud Engineer

    hace 6 días

    Bogotá, Bogotá D.E., Colombia Provectus A tiempo completo

    Cloud EngineerProvectus is a leading provider of AI and ML technologies, cloud services, and data engineering solutions. We are seeking a skilled Cloud Engineer to join our team and contribute to the development of innovative cloud-based solutions.About the RoleWe are looking for a highly motivated and experienced Cloud Engineer to design, implement, and...

  • AWS Cybersecurity Engineer

    hace 1 semana

    Bogotá, Bogotá D.E., Colombia SOS Trabajo A tiempo completo

    About the RoleSOS Trabajo is seeking a highly skilled AWS Cybersecurity Engineer to join our team. As a key member of our organization, you will be responsible for ensuring the security of our cloud-based platforms and implementing secure cloud technical solutions.Key ResponsibilitiesCloud Security StrategyDevelop and implement cloud security strategies to...

  • Senior Network Security Engineer

    hace 3 semanas

    Bogotá, Cundinamarca, Colombia Capgemini Engineering A tiempo completo

    Senior Network Security Engineer - Work from home Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you’d like, where you’ll be supported and inspired by a collaborative community of colleagues around the world, and where you’ll be able to reimagine what’s possible. Join us and help the world’s...

  • Senior Network Security Engineer

    hace 3 semanas

    Bogotá, Cundinamarca, Colombia Capgemini Engineering A tiempo completo

    **Senior Network Security Engineer - Work from home**: Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you’d like, where you’ll be supported and inspired by a collaborative community of colleagues around the world, and where you’ll be able to reimagine what’s possible. Join us and help the...

  • Cloud Security Solutions Architect

    hace 2 semanas

    Bogotá, Bogotá D.E., Colombia Amadeus A tiempo completo

    Job TitleCloud Cybersecurity EngineerAbout the Department:Our objective is to deliver comprehensive security operations that anticipate, identify, and respond to genuine security threats.Role Overview:We are in search of a proficient and enthusiastic Cloud Security Engineer to become part of our engineering team within the Global Security Operations Center....

  • Cloud Security Specialist

    hace 2 semanas

    Bogotá, Bogotá D.E., Colombia SOS Trabajo A tiempo completo

    General Overview The Cloud Security Specialist plays a crucial role in the development and implementation of secure cloud solutions, ensuring that all necessary security measures and requirements are integrated into the cloud architecture. Key Responsibilities Safeguard the organization's cloud assets in accordance with applicable governance laws,...