DEVSECOPS ENGINEER

Security Engineer – DevSecOps

The Information Security Department serves as the process owner for all activities related to availability, integrity, and confidentiality of customer, employee, and business information in compliance with the various financial institutions’ information security policies and procedures. The Security Engineer – DevSecOps will carry out the responsibilities of the position in accordance with OTS Information Security Policies and Procedures. This role will work closely with the Development Operations team to ensure continuous integration of security best practices into all phases of the Software Development Life Cycle (SDLC).

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

High-level: Tightly integrate security tools and processes throughout the DevOps pipeline Automate core security tasks by embedding security controls early on in the software development lifecycle Continuously monitor and remediate security defects across the application lifecycle, including development and maintenance. Support and manage application security tasks, to include testing and deployment Support and manage web application security tasks, to include testing and deployment Process management – Ensure adherence to the organization's SDLC development process Assist Development teams with source code management (organization and structure) Assist with distributed source control systems Ensure the SDLC environmental changes are versioned and synchronized for repeatable functionality Perform assessments, develop and/or improve build and release strategies Define, document, coordinate, execute and validate application of SCM methodologies Develop and maintain deployment and release structures Develop SDLC strategies for software control to fit best practices, standards and business objectives Assist in managing deployments, security, and support of business solutions. Manage internal customer relationship management and problem and incident management for applications and web applications Environment management – Support the management for change control for software and hardware configurations Assist in implementing and maintaining Application Lifecycle Management (ALM) Tools Enable data collection and reporting to support operational metrics related to software quantity, software quality, and process health. Manage security systems as needed Provide risk assessments and architecture recommendations

Bachelors’ degree in computer science, information systems, computer engineering, information security, or equivalent experience. A combination of at least 2-4 years of experience in Security and DevOps. Prior experience supporting CI (Continuous Integration) environment utilizing TFS Prior experience supporting CD (Continuous Delivery) environment utilizing Octopus Prior experience providing Software Development Life Cycle support .Net, C# and JavaScript development experience Knowledge and understanding of Veracode or similar tools Understanding and working knowledge of cloud development and cloud security Ability to provide remediation coaching and guidance on security-related code defects

None

Strong customer service orientated. Proven analytical and problem-solving abilities. Ability to effectively prioritize and execute tasks in a high-pressure environment. Strong interpersonal and oral communication skills. Adept at reading, writing, and interpreting technical documentation and procedure manuals. Ability to conduct research into hardware and software issues and products as required. Ability to present ideas and solutions in user-friendly language. Highly self-motivated and directed. Keen attention to detail. Skilled at working within a team-oriented, collaborative environment.

Professional representation of Open Technology Solutions. Job knowledge/timely, accurate and efficient performance. Adherence to OTS’s policies and procedures. Promotes and ensures the highest level of quality member Service is provided to all members. Confidentiality of all records. Timeliness of meeting regulatory guidelines. Compliance of regulatory requirements. Cost effectiveness and productivity of departmental operations.