DevSecOps at Tonnie

Mandatory Skills:

• DevSecOps, integrating security into CI/CD pipelines

• Automation of security controls and standards

• Familiar with integrating multiple security tools into CI/CD Pipelines (Gitlab preferred)

• Working experience to implement and test automation scripts and setups

Role Description Skills:

Responsibilities

• Support secure application development practices and a secure development mentality

• Identifying, communicating, and providing targeted remediation of vulnerabilities

• Developing and updating security patterns aligned with security requirements

• Identifying application security requirements for projects

• Coordinating and collaborating with multiple teams to ensure the confidentiality, integrity, and availability of Prudential assets that meets business needs

• Performing other security-related projects that may be assigned according to skills

• DevSecOps, integrating security into CI/CD pipelines

• Automation of security controls and standards

Skills

• Familiar with integrating multiple security tools into CI/CD Pipelines (Gitlab preferred)

• Working experience to implement and test automation scripts and setups

• Familiar with integrating security tools and providing vulnerability assessments. Leveraging tools such as Burp Suite Enterprise, Checkmarx, NowSecure, OWASP ZAP

• Understanding of OWASP Top 10 and SANS Top 25 vulnerabilities and how to remediate

• Working knowledge of using API to interact with web services provided by tools

• Conduct tool evaluations and build proof of concepts

• Integrate with reporting tools to provide consolidated view

• Ability to turn technical standards into working practice

• Assist in driving consistency and standardization of DevSecOps services across the enterprise

• Strong Automation skills, Python and Terraform preferred.

• Maintain documentations and user guides

• Knowledge of security within cloud environment, especially around networking, security and administration

• A motivated and flexible approach to work in an adapting fast-moving Agile environment utilizing technology and tools such as Jira, Jira Align, Miro, Confluence.

• Can demonstrate strong performance ethos and personal commitment for outstanding customer service

• Ability to interface with both technical and non-technical teams

• Willingness to train and upskill on a continuous basis

• Excellent communication, time management and organizational skills