Senior DevSecOps Analyst

Role Overview

• Implement security practices in software development (DevSecOps);
• Automate security checks in CI/CD pipelines;
• Monitor and mitigate vulnerabilities in applications and infrastructure;
• Perform static and dynamic code analysis to identify security flaws;
• Implement and configure security tools for applications and infrastructure;
• Collaborate with development, infrastructure, and security teams;
• Define and maintain security and compliance policies;
• Promote security training and awareness across technology teams;
• Respond to security incidents and recommend corrective measures;
• Participate in agile ceremonies (daily meetings, planning, review, and retrospective).

Requirements

• Strong experience with DevSecOps practices;
• Knowledge of security tools such as SonarQube, Checkmarx, Snyk, OWASP ZAP, etc.;
• Experience with CI/CD pipelines (Jenkins, GitLab CI, Azure DevOps, etc.);
• Knowledge of containers and orchestration (Docker, Kubernetes);
• Experience with API and web application security;
• Knowledge of infrastructure as code (Terraform, Ansible);
• Familiarity with agile methodologies (Scrum, Kanban);
• Experience with security monitoring and incident response;
• Good communication skills and ability to work in a team.

Tech Stack

• Ansible
• Azure
• Docker
• Jenkins
• Kubernetes
• Terraform

Benefits

• Hybrid work – onsite at the client's office in Barueri/SP once per week