DevSecOps Lead

4 semanas atrás


Lisbon, Portugal Boost-IT Tempo inteiro

Boost IT is a Portuguese technology consultancy company, we are integrated into one of the most entrepreneurial groups in Portugal, with investment in more than 30 companies.

We want to be known for being the most dynamic, energetic and reliable company to operate in the market and, for that, we want to count on you.

If you're passionate about technology and want to work on the most relevant technology projects, then this ad could be for you

Boost IT. Doing IT. Better

Tasks

• Do you love solving complex technical issues and interacting with people?

• Design and implement security architectures for software applications;• Interact with the sec champions guild to gather feedback in order to improve the

AppSec processes.

• Develop and enforce secure coding practices for the different development teams;

• Collaborate with development teams to ensure secure software development lifecycle

(SDLC) practices are followed;

• Provide guidance on security assessments and code reviews to identify vulnerabilities;

• Conduct threat modelling exercises;

• Provide guidance and training to developers on application security best practices;

• Stay up-to-date with the latest security trends and technologies;

• Validate AppSec pipeline adoption and remove blockers for widespread adoption.

• Review app lifecycle and validate it’s security posture.

Requirements

• We don’t want superman/wonder women, but we have some requirements.

• Developer at heart, not just a sec person.

• Need to speak and breath devsec.

• Think Sec, Dev and Ops at scale and automated.

• Able to manage a team of hackers and at the same time, be a team player and a great

communicator.

• Must be able to help teams to identify, and manage a guild of sec. champions (

developer advocates)

• Responsible and accountable to interact with the identified champions to evangelize

and promote App sec Best practices within the different teams.

• Strong knowledge of application security principles and practices on software

development, including OWASP;

• Familiarity with common security libraries, security controls, and common software

vulnerabilities;

• Familiarity with SSDLC and CI/CD best practices.

• Experience with security testing tools and methodologies;

• Familiarity with cloud environments (AWS, Azure, GCP) and 0trust architecture.

• Tools and tech stack : terraform/IaC, github/Gitlab, docker, 0trust, pipelining,

trivvy/anchore , cloud native architectures, python, node

• Familiarity with industry compliance and security standards including, NIST CSF, NIST

SP800-53, QNRCS, NIS 2.0, OWASP, CIS Controls, Mitre Att&ck and ISO 27000

series;

• Excellent problem-solving skills and attention to detail;

• Strong communication and interpersonal skills.

• Shift-left ambassador.

• Pivotal between Cloud & Devops, SoC, GRC and delivery areas.

• Foster AppSec culture and awareness.

Boost IT. Doing IT. Better



Boost IT was founded in 2018 with a core belief, that technology can be used to elevate people and improve the world.


  • DevSecOps Engineer

    Há 1 mês


    Lisbon, Portugal Richemont Tempo inteiro

      DevSecOps Engineer    " Join us to create secure application delivery ecosystems, safeguarding our organization from the vulnerabilities of tomorrow. "  (Guillaume. G, Cloud Governance & Architecture Lead)     CONTEXT  As a DevSecOps Engineer, you will be part of the Governance & Architecture team within the Cloud & DevOps...


  • Lisbon, Portugal TUI Tempo inteiro

    ABOUT THE JOB As a Senior System Engineer, you will be part of a cross-functional team that enables System Engineering skills and capabilities across TUI Tech. Being an enthusiast in System Engineering with a DevSecOps mindset, and thanks to your excellent collaboration skills.  You will work to deliver the best answers to our customers’ needs. ...

  • DevOps Engineer

    Há 1 mês


    Lisbon, Portugal Capgemini Tempo inteiro

    CAPGEMINI ENGINEERINGAt Capgemini Engineering, the world leader in engineering services, we bring together a global team of engineers, scientists, and architects to help the world’s most innovative companies unleash their potential. From autonomous cars to life-saving robots, our digital and software technology experts think outside the box as they provide...

  • DevOps Engineer

    4 semanas atrás


    Lisbon, Portugal Capgemini Tempo inteiro

    CAPGEMINI ENGINEERINGAt Capgemini Engineering, the world leader in engineering services, we bring together a global team of engineers, scientists, and architects to help the world’s most innovative companies unleash their potential. From autonomous cars to life-saving robots, our digital and software technology experts think outside the box as they provide...

  • DevOps Engineer

    Há 1 mês


    Lisbon, Portugal Capgemini Tempo inteiro

    CAPGEMINI ENGINEERING At Capgemini Engineering, the world leader in engineering services, we bring together a global team of engineers, scientists, and architects to help the worlds most innovative companies unleash their potential. From autonomous cars to life-saving robots, our digital and software technology experts think outside the box as they...

  • Solutions Architect

    2 meses atrás


    Lisbon, Portugal TUI Tempo inteiro

    ABOUT THE JOB : As a SolutionArchitect, you are responsible for the creation of technology and organisational transformation activities and technology direction. In collaboration with technology leaders including the Head of Architecture and other senior architects, you will help shape a vision and strategies regarding IT architecture to translate...


  • Lisbon, Portugal Top Sigma, Lda Tempo inteiro

    JOB DETAILS Location: Lisbon Work model: Hybrid (1 to 2 times per month)Department: IT/Cloud Reports to CTODAY-TO-DAY DUTIES:As a Senior Cloud Engineer, you will: Drive the design and implementation of scalable, highly available, and fault-tolerant systems on the Cloud (AWS).Lead proof of concepts (POCs) on new technologies, assessing...

  • Senior Cloud Engineer

    4 semanas atrás


    Lisbon, Portugal Top Sigma, Lda Tempo inteiro

    JOB DETAILS Location: Lisbon Work model: Hybrid (1 to 2 times per month)Department: IT/Cloud Reports to CTODAY-TO-DAY DUTIES:As a Senior Cloud Engineer, you will: Drive the design and implementation of scalable, highly available, and fault-tolerant systems on the Cloud (AWS).Lead proof of concepts (POCs) on new technologies, assessing...

  • Senior Cloud Engineer

    3 semanas atrás


    Lisbon, Portugal Top Sigma, Lda Tempo inteiro

    JOB DETAILS Location: Lisbon Work model: Hybrid (1 to 2 times per month)Department: IT/Cloud Reports to CTO DAY-TO-DAY DUTIES: As a Senior Cloud Engineer, you will: Drive the design and implementation of scalable, highly available, and fault-tolerant systems on the Cloud (AWS).Lead proof of concepts (POCs) on new technologies, assessing their potential...

  • Head of Technology Practice

    2 semanas atrás


    Lisbon, Portugal TUI Tempo inteiro

    ABOUT THE JOB : As a Head Of Technology Practices, you will be responsible for the leadership of the Engineering Practice across several cross-functional agile teams each and provide the technical expertise , guidance and support on complex problems while ensuring adherence to best practices in mobile app design , development and testing for TUI Mobile...


  • Lisbon, Portugal TUI Tempo inteiro

    ABOUT THE JOB As a Full Stack Software Engineer, you will be part of a cross-functional team or a practice team that enables software development skills and capabilities across all areas of the sites. Together with your team, you will own the software products from conception to operation. Being an enthusiast in software engineering and...


  • Lisbon, Portugal TUI Tempo inteiro

    ABOUT THE JOB : As a Security Architect , you will be working with colleagues in delivery teams within an agile environment. As an enthusiast in security architecture, you will use your excellent facilitation and solicitation skills and strong security mindset to effectively engage with teams, developing a strong understanding of their context and the...


  • Lisbon, Portugal TUI Tempo inteiro

    ABOUT THE JOB : As a Security Architect , you will be working with colleagues in delivery teams within an agile environment. As an enthusiast in security architecture, you will use your excellent facilitation and solicitation skills and strong security mindset to effectively engage with teams, developing a strong understanding of their context and the...

  • Full Stack Software Engineer

    4 semanas atrás


    Lisbon, Portugal TUI Tempo inteiro

    ABOUT THE JOB As a Full Stack Software Engineer, you will be part of a cross-functional team or a practice team that enables software development skills and capabilities across all areas of the sites. Together with your team, you will own the software products from conception to operation. Being an enthusiast in software engineering and...