DevSecOps Security Engineer

W2 or Corp to corp Payment.  Must ahve 10+ years of hardcore experience as DevSecops

Send this Sunday as soon as possible to    Please no AI generated or fake resumes from 3rd parties

Job Title - DevSecOps Security Engineer
Location - New York, NY
Duration - 12+ months

What You/ll Do:

• Be part of a team of engineers to implement client specific security policies in the CI/CD security tools including but not limited to SAST, OSS and SCA applications.
• -Work with Development, DevOps and Security teams to identify and develop automated security and compliance capabilities in support of DevSecOps processes.
• -Define the security rules that needs to be adhered to at a code level in web and mobile applications written in .NET, Java, React, Python and other languages.
• -With your development background and security knowledge, provide secure stable platform for enforcing application security controls.
• -Support security standards, design & implement architectural patterns to increase the resiliency and scalability of security platform.
• -Work with our partners to implement, manage, and optimize security measures within our GitHub repositories to continuously improve code integrity and protect against vulnerabilities.

Required skillset:

• -Must have: 5+ years software development experience using PythonoWorking with APIs, including but not limited to ReSToUnit testing frameworks
• -Multi-process and multi-thread architecture
• -Must have: 5+ years in linux, strong bash scripting skills.
• -Deep understanding of CI CD pipelines
• -Working knowledge of windows environment, simple scripting dos-batch etc.
• -Bachelor?s degree with 10+ years of work experience in the IT field
• -Ability to process large datasets for reporting and analysis.Desired Skillset:
• -A self-starter, with a strong desire for learning new technologies and applying them to solve problems
• -Knowledge of SAST, OSS technologies
• -Ability to perform Python code reviews with minimal assistance
• -Expertise in monitoring, alerting, reporting, data analysis is desired.
• -Experience with application build environments like Jenkins, GitHub Actions, Teamcity etc.
• -DevOps container/orchestration tools (Kubernetes, Docker, Puppet, etc) is a plus
• -Experience with evaluation, integration and onboard of security tools such as DAST, RASP, WAF, vulnerability scanner results, container analyzers, open source scanning is a plus