DevSecOps Engineer

2 semanas atrás

São Paulo SP, Brasil Zuri Tempo inteiro

Job Overview

Weare seeking an experienced DevSecOps Engineer to integrate security practices into our software development lifecycle (SDLC) and infrastructure management processes. This role will focus on implementing secure coding practices, automating security processes, and enhancing our overall application and infrastructure security posture.

Key Responsibilities

  • Develop and implement secure coding practices and guidelines for development teams;
  • Create and maintain infrastructure as code (IaC) using tools like Terraform, with a focus on security best practices;
  • Implement and manage service account rotation practices across our cloud environments;
  • Develop automation scripts and tools in Go to enhance security processes;
  • Conduct code reviews with a security focus, particularly for Go-based projects Design and implement a centralised secrets management solution;
  • Enhance and secure CI/CD pipelines, integrating security checks and tests;
  • Implement and manage container security practices;
  • Collaborate with development, operations, and security teams to integrate security throughout the SDLC;
  • Develop and maintain security documentation for development and operations processes;
  • Assist in security incident response related to application and infrastructure issues Implement and manage security monitoring and logging solutions for applications and infrastructure;
  • Automate security testing and integrate it into the development process.

Required Skills and Experience

  • 5+ years of experience in DevOps or software development roles, with a strong focus on security;
  • Experience with the Go programming language;
  • Strong understanding of secure coding practices and common vulnerabilities (e.g., OWASPTop10);
  • Experience with infrastructure as code tools, particularly Terraform;
  • Hands-on experience with CI/CD tools (e.g., Jenkins, GitHub, BitBucket);
  • Knowledge of container technologies (Docker, Kubernetes) and associated security practices;
  • Experience with cloud platforms, particularly GCP and AWS;
  • Experience with secrets management tools (e.g., HashiCorp Vault, AWS;
  • Secrets Manager, GCP Secret Manager);
  • Understanding of identity and access management (IAM) concepts and service account management;
  • Experience with security testing tools and practices (SAST, DAST, SCA).

Preferred Qualifications

  • Relevant certifications (e.g., CSSLP, AWS Certified DevOps Engineer, Google Cloud Professional DevOps Engineer);
  • Experience with other programming languages (e.g., Python, Java, JavaScript);
  • Knowledge of compliance requirements related to application security (e.g., PCI DSS, ISO27001)

CONTRATAÇÃO PJ E HÍBRIDA

  • Devsecops Engineer

    2 semanas atrás

    São Paulo, Brasil Zuri Tempo inteiro

    Job Overview Weare seeking an experienced DevSecOps Engineer to integrate security practices into our software development lifecycle (SDLC) and infrastructure management processes. This role will focus on implementing secure coding practices, automating security processes, and enhancing our overall application and infrastructure security posture.Key...

  • DevSecOps Engineer

    2 semanas atrás

    São Paulo, Brasil Zuri Tempo inteiro

    Job OverviewWeare seeking an experienced DevSecOps Engineer to integrate security practices into our software development lifecycle (SDLC) and infrastructure management processes. This role will focus on implementing secure coding practices, automating security processes, and enhancing our overall application and infrastructure security posture.Key...

  • DevSecOps Engineer

    2 semanas atrás

    São Paulo, Brasil Zuri Tempo inteiro

    Job Overview Weare seeking an experienced DevSecOps Engineer to integrate security practices into our software development lifecycle (SDLC) and infrastructure management processes. This role will focus on implementing secure coding practices, automating security processes, and enhancing our overall application and infrastructure security posture.Key...

  • Devsecops Engineer

    1 dia atrás

    São Paulo, Brasil Zuri Tempo inteiro

    Job Overview Weare seeking an experienced DevSecOps Engineer to integrate security practices into our software development lifecycle (SDLC) and infrastructure management processes. This role will focus on implementing secure coding practices, automating security processes, and enhancing our overall application and infrastructure security posture. Key...

  • DevSecOps Engineer

    2 semanas atrás

    São Paulo, Brasil Zuri Tempo inteiro

    Job Overview Weare seeking an experienced DevSecOps Engineer to integrate security practices into our software development lifecycle (SDLC) and infrastructure management processes. This role will focus on implementing secure coding practices, automating security processes, and enhancing our overall application and infrastructure security posture.Key...

  • DevSecOps Engineer

    2 semanas atrás

    São Paulo, Brazil, BR Zuri Tempo inteiro

    Job Overview Weare seeking an experienced DevSecOps Engineer to integrate security practices into our software development lifecycle (SDLC) and infrastructure management processes. This role will focus on implementing secure coding practices, automating security processes, and enhancing our overall application and infrastructure security posture.Key...

  • DevSecOps Engineer

    4 semanas atrás

    São Paulo, Brasil AGGRANDIZE Tempo inteiro

    Olá!A Aggrandize surgiu em 2015 e se consolidou como um dos maiores grupos de TI, sendo referência de mercado através de clientes satisfeitos e um ambiente de trabalho inclusivo, colaborativo e humanizado. Consideramos como pilares a adaptabilidade, colaboração, foco no cliente e visão de dono.Foram com esses direcionadores, visão e valores que...

  • Zuri | DevSecOps Engineer | são paulo

    2 semanas atrás

    são paulo, Brasil Zuri Tempo inteiro

    Job OverviewWeare seeking an experienced DevSecOps Engineer to integrate security practices into our software development lifecycle (SDLC) and infrastructure management processes. This role will focus on implementing secure coding practices, automating security processes, and enhancing our overall application and infrastructure security posture.Key...

  • Zuri | DevSecOps Engineer | são paulo

    2 semanas atrás

    são paulo, Brasil Zuri Tempo inteiro

    Job Overview Weare seeking an experienced DevSecOps Engineer to integrate security practices into our software development lifecycle (SDLC) and infrastructure management processes. This role will focus on implementing secure coding practices, automating security processes, and enhancing our overall application and infrastructure security posture. Key...

  • Zuri | DevSecOps Engineer | são paulo

    2 semanas atrás

    são paulo, Brasil Zuri Tempo inteiro

    Job Overview Weare seeking an experienced DevSecOps Engineer to integrate security practices into our software development lifecycle (SDLC) and infrastructure management processes. This role will focus on implementing secure coding practices, automating security processes, and enhancing our overall application and infrastructure security posture.Key...

  • Cyber Security Engineer

    3 semanas atrás

    São Paulo, SP, Brasil Gold Spell Tempo inteiro

    Sobre nós: O Grupo Gold está revolucionando o mercado de cosméticos com inovação e impacto global por meio de suas marcas Gold Spell e Everk Cosméticos. Com mais de 13 mil influenciadores e presença sólida na América Latina, Estados Unidos e Europa, conectamos beleza, tecnologia e inovação para transformar a experiência de milhões de...

  • Cloud Security Engineer

    2 semanas atrás

    São Paulo, SP, Brasil Zuri Tempo inteiro

    Job Overview Weare seeking an experienced Cloud Security Engineer to remediate security risks in our Google Cloud Platform (GCP) and Amazon Web Services (AWS) environments. This role will focus on implementing robust security controls, improving monitoring capabilities, and enhancing our overall cloud security posture. Key Responsibilities Implement and...

  • Cyber Security Engineer

    3 semanas atrás

    São Paulo, Brasil Gold Spell Tempo inteiro

    Sobre nós:OGrupo Goldestá revolucionando o mercado de cosméticos com inovação e impacto global por meio de suas marcas Gold Spell e Everk Cosméticos. Com mais de 13 mil influenciadores e presença sólida na América Latina, Estados Unidos e Europa, conectamos beleza, tecnologia e inovação para transformar a experiência de milhões de...

  • Cloud Security Engineer

    2 semanas atrás

    São Paulo, Brasil Zuri Tempo inteiro

    Job OverviewWeare seeking an experienced Cloud Security Engineer to remediate security risks in our Google Cloud Platform (GCP) and Amazon Web Services (AWS) environments. This role will focus on implementing robust security controls, improving monitoring capabilities, and enhancing our overall cloud security posture.Key ResponsibilitiesImplement and...

  • Cyber Security Engineer

    3 semanas atrás

    São Paulo, São Paulo, Estado de São Paulo, Brasil Gold Spell Tempo inteiro

    Sobre nós:O Grupo Gold está revolucionando o mercado de cosméticos com inovação e impacto global por meio de suas marcas Gold Spell e Everk Cosméticos. Com mais de 13 mil influenciadores e presença sólida na América Latina, Estados Unidos e Europa, conectamos beleza, tecnologia e inovação para transformar a experiência de milhões de...

  • Cyber Security Engineer

    3 semanas atrás

    São Paulo, Brasil Gold Spell Tempo inteiro

    Sobre nós:O Grupo Gold está revolucionando o mercado de cosméticos com inovação e impacto global por meio de suas marcas Gold Spell e Everk Cosméticos. Com mais de 13 mil influenciadores e presença sólida na América Latina, Estados Unidos e Europa, conectamos beleza, tecnologia e inovação para transformar a experiência de milhões de...

  • IT Engineer Spec IV

    Há 1 mês

    São Paulo, Brasil Santander Tempo inteiro

    IT Engineer Spec IV Country: Brazil # QUEM SOMOS A F1RST é o futuro e sua carreira está aqui! Nossa cultura é baseada em “Pessoas, Inovação e Resultados”. ️ Fazemos parte do maior banco Internacional do Brasil, um dos maiores bancos do mundo. Promovendo serviços e experiências para os mais de 60 milhões de clientes de todo o ecossistema...

  • Cloud Security Engineer

    2 semanas atrás

    São Paulo, Brasil Zuri Tempo inteiro

    Job OverviewWeare seeking an experienced Cloud Security Engineer to remediate security risks in our Google Cloud Platform (GCP) and Amazon Web Services (AWS) environments. This role will focus on implementing robust security controls, improving monitoring capabilities, and enhancing our overall cloud security posture. Key ResponsibilitiesImplement and...

  • Cloud Security Engineer

    2 semanas atrás

    São Paulo, Brasil Zuri Tempo inteiro

    Job OverviewWeare seeking an experienced Cloud Security Engineer to remediate security risks in our Google Cloud Platform (GCP) and Amazon Web Services (AWS) environments. This role will focus on implementing robust security controls, improving monitoring capabilities, and enhancing our overall cloud security posture. Key ResponsibilitiesImplement and...

  • Security Engineer

    Há 1 mês

    São Paulo, Brasil Prudent Technologies and Consulting, Inc. Tempo inteiro

    6 Months Contract AppSec/DevOpSec Security EngineerWe are seeking a highly skilled and motivated Appsec/DevSecOps Engineer to join our cybersecurity architecture and engineering team. This role is crucial for integrating security into our DevOps processes, ensuring the safety and compliance of our software development and deployment in the life sciences and...