JOB DESCRIPTION:

We are looking for DevSecOps Engineer with 6-8 years of experience.

As a DevSecOps Engineer, you will be responsible for identifying, mitigating, and preventing security vulnerabilities in an organization's Application Programming Interfaces (APIs) throughout the entire software development lifecycle (SDLC).

Requirements:

Proficiency in programming languages such as Python, Java, JavaScript, or Go, to understand and review code effectively.

Direct hands-on experience developing and securing web APIs and web applications: REST, SOAP, gRPC.

Direct hands-on experience with security testing of web services and web APIs.

Experience with API Management solutions.

Knowledge of application threat modelling, Remediation of OWASP API Top 10, CIS Top 10, SANS Top 25 a plus.

Responsibilities:

Conduct design reviews and threat modelling exercises for new APIs and features to proactively identify potential ...