Devops engineer in application security

This is an exciting opportunity to join Deloitte Operations for an engagement with one of our clients. We’re looking for an experienced DevSecOps / DevOps Engineer to support a major programme focused on strengthening security and vulnerability management across application deployment lifecycles. The role will involve implementing and optimising security scanning and controls within CI/CD pipelines, with a particular focus on JFrog Artifactory and application security tooling.

• Implementing and optimising security scanning and controls within CI/CD pipelines

• Strong hands-on DevOps / DevSecOps engineering experience
• Strong JFrog Artifactory experience, ideally including implementation/configuration rather than solely end-user experience
• Experience implementing vulnerability and security scanning within application deployment pipelines
• SonarQube / SonarQube Advanced Security experience
• Strong knowledge of CI/CD pipelines and embedding security controls throughout the software delivery lifecycle
• Experience with SBOM (Software Bill of Materials) generation
• Bitbucket experience, including branch protection and pull-request controls
• Understanding of container/image security and secure management of external binaries and images
• This would suit an engineer with a strong DevOps background who has moved heavily into DevSecOps, application security and secure software delivery.
• Будет плюсом: JFrog Xray / Artifactory Curation experience highly desirable; Experience with Cosign / container image signing would be advantageous

• Условий в вакансии нет