Security Automation Specialist - Transformative Role
We are seeking a highly skilled Security Automation Specialist to drive the future of security automation across our complex global environment.
You will work closely with our development teams to embed cutting-edge security practices into every stage of the development life cycle across our cloud and on-premises platforms.
This is an exciting opportunity to work with a range of technologies, including SAST, DAST, IAST, and SCA tools, and to integrate security testing into infrastructure as code workflows.
-----------------------------------
Key Responsibilities:
* Design and implement enterprise-grade security assessment pipelines integrating SAST, DAST, IAST, and SCA tools into CI/CD workflows.
* Integrate security testing into infrastructure as code workflows (Terraform, CloudFormation), ensuring security by design in automated deployments.
* Support cloud-native (Azure, GCP) and on-prem infrastructure with tailored assessment strategies.
* Implement pre-deployment validation for immutable resources and architect scanning solutions for long-lived assets using network and agent-based tools.
* Establish frameworks for automated enforcement of security baselines and compliance requirements.
* Collaborate with DevOps and platform teams to embed security early in the software delivery process.
* Continuously evaluate emerging security tools and techniques, ensuring alignment with evolving threats and technologies.
* Provide governance, secure design patterns, and best practices for security automation.
-----------------------------------
Requirements:
* Strong knowledge of CI/CD security integrations and DevSecOps principles.
* Proficiency in security assessment tools (SAST, DAST, IAST, SCA) and pipeline automation.
* Expertise in CI/CD security, DevSecOps, and automation of security assessments (SAST, DAST, IAST, SCA).
* Hands-on with Infrastructure as Code security (Terraform, CloudFormation) and Policy-as-Code (Azure Policy, OPA).
* Experience securing hybrid/multi-cloud (Azure, GCP) and on-prem environments.
* Strong knowledge of security frameworks (NIST CSF, ISO 27001/2, CIS) and secure design principles.
* Skilled in threat modelling, Zero Trust, Least Privilege, and Network Segmentation.
* Familiar with SSDLC, governance, risk, compliance, and secure coding practices.
* Understanding of architectural patterns (Multi-Tier, Microservices, Event-Driven) and frameworks (TOGAF, SABSA).
-----------------------------------