Senior DevSecOps Engineer

DevSecOps EngineerWe are looking for a passionate, collaborative and driven DevSecOps Engineer to join our team. You will be contributing the DevSecOps team within Risk and Security. Influence and drive security standards alignment make recommendations on security risks, threats, and issues. Build relationships with technology and business leaders and SMEs to implement security controls consistent with the security programs mission.Evangelize DevSecOps principles and culture across the organizationEngage with multiple development teams to ensure adherence to secure development standardsMaintain tools and automation facilitating the validation of code security and quality.Manage and identify new technologies and reviewing the security tool stack for completeness.Regular review of security tooling, gap identification, and building business cases to identify new technologies to address new and emerging risks.Contribute expertise in defining security controls and requirements identification for large and small technology and business initiatives.Measure the progress of the Information Security program through establishing and reporting of metrics related to the development and delivery of our productsContribute and update Information Security policies and standards as needed.Recommend changes to enhance security and reduce risk where applicableBuild strong relationships with other technical personnel so that they are willing to reach out for your opinion / thoughts / insight on security thingsContribute to the overall direction/mission/purpose of the Technical Security teamAssist in the identification, design, and implementation of security tools that build customer trust in Technical Security servicesBachelor's degree, or the equivalent years related experience required6+ years of combined hands-on experience securing Hybrid and Multi Cloud environments (Azure and AWS).6+ years building/maintaining CI/CD pipelinesAutomation, scripting, and business intelligence experience highly preferred (Terraform, PowerShell, python, PowerBI, and API configuration experience)Knowledge and experience with leading information security frameworks and best practices (NIST Cybersecurity Framework, ISO27001/2, CIS Top 20 Controls, CSA CCM).