DevSecOps

We are looking for a DevSecOps for a project for Porto (hybrid):

Responsibilities:

Support the Application Security team in daily tasks;
Be the focal point of security issues, design remediation plans that are realistic and make sense given the reality of infrastructure;
Work together with the Client Application Security team;
KPI reports & Monthly meetings with analysis of KPIs and evolution of service;
Proper implementation and maintenance of S-SDLC processes;
SAST and SCA results screening;
Regular identification of improvements to the framework;
Vulnerability Analysis and Recommendations;
Consulting on solutions to solve problems and optimize processes;
Analysis, validation, and integrations new projects;
Process optimization;
Be the cybersecurity spokesperson on all Cloud infrastructure topics;
Technical and executive reports.

You must have:

Knowledge on cloud security methodologies and technologies;
Specialization in the SecDevOps framework;
Experience in cybersecurity operations;
Experience in SAST, SCA, Secret Management, Vulnerability AssessmentKPI reports;
Experience in Vulnerability Analysis and Recommendations;
Process optimization;
Experience with large customer infrastructures;
Excellent communication skills, both written and oral (Portuguese and English);
Able to work autonomously, identifying, and prioritising team workload;
Ability to work under pressure.

What can you expect from us?

Health insurance;
A personalized training plan, with a budget to spend on the training and technical books you find necessary;
Constant feedback so you can grow professionally;
Remote onboarding process;
Team events every semester so you can live new adventures;
Exclusive discounts and offers from our partners;
Culture of proximity and transparency. Your ideas and needs are heard and valued by us!