Full-time
DevSecOps Engineer
Dubai, UAE
Posted Feb 1, 2024
Competitive + Benefits
About the Role
As a DevSecOps Engineer at Captrit, you'll be responsible for integrating security practices into our development and operations processes. You'll work at the intersection of development, operations, and security to ensure that security is built into every stage of our software development lifecycle.
What You'll Do
- Secure Pipeline Development: Design and implement secure CI/CD pipelines with integrated security testing
- Security Automation: Automate security scanning, testing, and compliance checks
- Infrastructure Security: Implement secure Infrastructure as Code practices
- Container Security: Configure and maintain secure container environments
- Security Monitoring: Monitor development environments for security threats
- Team Collaboration: Work closely with development and operations teams
What We're Looking For
We're seeking a passionate DevSecOps professional with:
- Strong technical skills in DevOps and security engineering
- Experience with modern development tools and practices
- Excellent automation and scripting abilities
- A commitment to building security into development processes
Why Join Captrit?
- Work with cutting-edge DevSecOps tools and technologies
- Join a team of skilled security and development professionals
- Make a real impact in building secure development practices
- Continuous learning and skill development opportunities
- Competitive compensation and benefits package
Application Process
- Submit your application with resume and cover letter
- Technical assessment and automation challenge
- Technical interview with our DevSecOps team
- Final interview with leadership team
- Offer and onboarding
We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
Requirements
- 3+ years of experience in DevOps, DevSecOps, or security engineering
- Strong knowledge of CI/CD pipelines (Jenkins, GitLab CI, GitHub Actions)
- Experience with containerization (Docker, Kubernetes)
- Knowledge of Infrastructure as Code (Terraform, CloudFormation)
- Experience with cloud platforms (AWS, Azure, GCP)
- Familiarity with security tools (SAST, DAST, SCA, IAST)
- Experience with security scanning tools (SonarQube, OWASP ZAP, Snyk)
- Knowledge of security frameworks and compliance (OWASP, NIST, ISO 27001)
- Proficiency in scripting languages (Python, Bash, PowerShell)
- Experience with monitoring and logging tools (ELK Stack, Prometheus, Grafana)
- Understanding of network security and access controls
- Excellent problem-solving and automation skills
Responsibilities
- Design and implement secure CI/CD pipelines
- Integrate security scanning tools into development workflows
- Automate security testing and vulnerability scanning
- Implement Infrastructure as Code with security best practices
- Configure and maintain container security policies
- Monitor and respond to security alerts in development environments
- Collaborate with development teams on secure coding practices
- Implement and maintain secrets management solutions
- Conduct security assessments of development tools and processes
- Develop and maintain security automation scripts
- Train development teams on DevSecOps practices
- Stay updated with latest DevSecOps tools and methodologies
Benefits
- Competitive salary with performance bonuses
- Comprehensive health insurance coverage
- Professional development and certification support
- Flexible working arrangements
- Annual leave and public holidays
- Modern office in Dubai Internet City
- Team building and social events
- Career growth opportunities
- Latest tools and technologies
- Conference and training budget
Apply for this position
Join our cybersecurity team and make a difference