Job Description
Job Description
The software engineer will maintain and improve the CI/CD pipeline. They must have a deep understanding of software development methodologies and modern delivery environments. Their responsibilities will include designing, developing and maintaining the CI/CD pipeline, to include end-to-end and unit tests. They will develop tests that map to the NIST 800-53 Rev 5 controls and ensure that security controls are implemented during the pipeline. The software engineer will also assist other team members with code reviews and software best practices.
The Minimum Qualifications Are As Follows:
- Minimum of five years of experience as a developer with focus on delivering secure code through highly optimized pipelines.
- Minimum of two years of experience managing a CI/CD environment that uses security tests to enforce security requirements.
- Minimum of three years of experience designing and implementing automated CI/CD tests including unit, end-to-end, use case and misuse cases.
- Proficient in Python and JavaScript.
- Proficient in Splunk’s Search Processing Language, React and Kusto Query Language
- Hands-on experience with firewall, SIEM, penetration, vulnerability, and forensics tools.
- Hands-on experience implementing secure cloud solutions.
- Experience in Vulnerability management, incident response, data loss prevention, insider threat, system upkeep, and system/user lifecycle management.
- Strong knowledge of information technology architecture and topology design.
- Moderate security framework and standard implementation.
This Role Is Responsible For:
- providing security solutions, regulatory, and legal requirements, and assuring the confidentiality, integrity, and availability of information assets
- participates and completes tasks associated with the implementations for systems and network security technologies.
- executes testing plans
- Coordinates and prepares reporting of data security events and incidents.
- Provides system and network architecture support. Provides technical support to security and technology associates.
- Provides trouble resolution on complex issues.
- Performs system and network upgrade tasks.
- Designs and analyzes vendor services and information security requirements. maintains relationship with key vendors.
- Participates and completes lights-on initiatives to consolidate equipment and/or implement agency relocations.
- Performs complex configuration changes to meet security requirements.
- Performs capacity analysis; recommends and implements capacity increases.
Company Description
IT Professional Services Firm focused on Information Communications Technologies - www.quadtec.com
Company Description
IT Professional Services Firm focused on Information Communications Technologies - www.quadtec.com