SecOps Engineer (AppSec)

The SecOps team is responsible for design and implementation of security tools and processes targeting the tools and the platform, such as incident management, root cause analysis, application security, endpoint security, Cloud Security Governance, Kubernetes Security and Deployments. What you will do: Protect the confidentiality, integrity, and availability of applications, services, data, and cloud infrastructure. Identify, analyze, and mitigate vulnerabilities. Provide support, guidance, and education to the DevOps Team, application owners, and other areas. Plan, manage, and execute remediation efforts. Assist with the development of application security test plans. Research, evaluate, and recommend new and existing tools and techniques. Collaborate with threat detection and incident response when responding to security threats. Provide documentation on vulnerability and risk analysis for security audits. Develop and implement application security processes, including identifying application security weaknesses, developing security strategies, and performing penetration tests Develop and implement security-related standards, policies, and procedures Analyze security data to identify and mitigate potential threats Perform internal security audits Conduct internal penetration tests and vulnerability assessments, as well as develop remediation plans for findings Create and manage risk analysis documentation Manage the development of security metrics and reports Manage the architecture and implementation of information security best practices Maintain a security engineering knowledge base