Match score not available

DevSecOps Engineer

Remote:

Full Remote

Contract:

Full time

Experience:

Mid-level (2-5 years)

Work from:

Ukraine

Offer summary

Qualifications:

Strong knowledge of security principles, practices, and frameworks such as ISO 27001 and NIST, Experience with tools like SIEM, IDS/IPS, and vulnerability scanners, Solid understanding of DevOps practices and tools including CI/CD pipelines, Docker, Kubernetes, Expertise in cloud security services on AWS or GCP, Excellent communication skills and strong analytical abilities.

Key responsabilities:

Enforce company security policies and conduct regular audits
Integrate security controls into CI/CD pipelines and automate security testing
Implement cloud security solutions and monitor vulnerabilities
Conduct risk assessments and lead incident response efforts
Collaborate with teams to embed security in all processes and provide training

AUTODOC Large https://autodoc.group/

5001 - 10000 Employees

See more AUTODOC offers

Job description

Company Description

AUTODOC is the largest and fastest growing auto parts ecommerce platform in Europe.
Present across 27 countries with around 5,000 employees, AUTODOC generated revenue of over €1.3 billion in 2023, supplying more than 7.4 million active customers with its 5.8 million vehicle parts and accessories for car, truck, and motorcycle brands.

Curious minds, adventurous experts and tech-savvy professionals - one team, one billion euros revenue. Catch the ride!

Job Description

Responsibilities

Security Policy Compliance

Enforce adherence to company security policies and industry regulations.
Develop, update, and maintain security documentation, standards, and guidelines.
Conduct regular audits to ensure compliance with security policies.

DevSecOps Integration

Integrate security controls and checks into CI/CD pipelines.
Automate security testing and vulnerability assessments within the development lifecycle.

Advanced Cloud Security Practices

Implement cutting-edge cloud security solutions across GCP.
Manage and monitor cloud security configurations to prevent and detect vulnerabilities.
Stay updated with the latest cloud security trends and technologies.

Innovative Security Solutions

Design and implement non-standard, bold security measures to enhance infrastructure security.
Challenge conventional security approaches to drive significant improvements.
Evaluate and adopt new security tools and technologies.

Risk Assessment and Management

Conduct security risk assessments and threat modeling.
Identify potential security threats and develop mitigation strategies.
Implement and manage security incident response plans.

Collaboration and Training

Collaborate with cross-functional teams to ensure security is embedded in all processes.
Provide training and mentorship on security best practices to team members.
Foster a culture of security awareness across the organization.

Monitoring and Incident Response

Implement security monitoring tools and analyze security logs.
Lead response efforts for security incidents and breaches.
Coordinate post-incident analyses and implement improvements.

Requirements

Security Expertise

Strong knowledge of security principles, practices, and frameworks (e.g., ISO 27001, NIST).
Experience with security tools such as SIEM, IDS/IPS, and vulnerability scanners.
Proficiency in implementing security measures in cloud environments.

DevOps Skills

Solid understanding of DevOps practices and tools (CI/CD pipelines, Docker, Kubernetes).
Experience integrating security into DevOps processes (DevSecOps).

Cloud Security

Expertise in cloud security services and architectures on AWS or GCP.
Hands-on experience with cloud-native security tools and configurations.

Innovative Mindset

Ability to conceive and implement unconventional security solutions.
Track record of transforming security processes in impactful ways.

Communication Skills

Excellent verbal and written communication skills.
Ability to explain complex security concepts to technical and non-technical stakeholders.

Problem-Solving Abilities

Strong analytical skills to identify and mitigate security risks.
Capability to make decisive actions under pressure during security incidents.

Nice to have

Experience in Large International Companies
Successful experience performing similar roles in large multinational organizations.
Understanding of global security challenges and compliance requirements.
Advanced Certifications
Certifications such as CISSP, CISM, CEH, or cloud security certifications.
Adaptability
Openness to learning new security tools and methodologies.
Ability to adapt strategies in response to evolving threats and technologies.
Strategic Thinking

What do we offer?

Competitive salaries based on your professional experience
Meals Allowance
Fast growing international company with stable employment
Annual vacation of 22 working days and 1 additional day off on your birthday
Healthcare Insurance
Mental Wellbeing Program – the opportunity for free psychological counseling for you and your family members 24/7 hotline and online sessions
AUTODOC Corporate Discount (1,080 Euros per annum) to order parts for their own use at special discounted rate
Retail discounts of up to 75% on travel, technology, fashion and much more
Opportunities for advancement, further trainings (over 650 courses on soft and hard skills on our e-learning platform) and coaching
Free English and German language classes
Referral Program with attractive incentives
Flexible working hours and hybrid work