DevSecOps Engineer

Responsibilities:

• Improve security design and controls within GCP and Kubernetes.
• Champion secure development by integrating security best practices early into the software development lifecycle.
• Build and automate security tooling for vulnerability detection, remediation, and compliance verification.

90 Day Plan:

• Immerse yourself in Virta's culture, engineering workflows, and cloud platform (GCP/Kubernetes).
• Learn the landscape of existing systems, CI/CD pipelines, and security tooling.
• Assess and identify opportunities for improving IAM, data security, network controls, and security policies.

Must-Haves:

• Experience securing cloud-native applications in Kubernetes, with GCP strongly preferred.
• Strong grasp of networking, IAM, encryption, and web application vulnerabilities (OWASP Top 10).
• Hands-on experience in application security, including secure coding, vulnerability management, and security testing (SAST, DAST).