Apptad - DevSecOps Application Security Specialist

Apptad Inc. • Georgia, United States, US • 21h ago

Job Title: Apptad - DevSecOps Application Security Specialist

Job Location: Remote

Job Duration: Long-Term Job Description

The DevSecOps Application Security Specialist will provide expertise to support and enhance the security tools integrated into the CI/CD pipeline for a Government agency as part of an IT
Modernization program.
Security Tools Expertise: Manage and optimize security tools within the CI/CD pipeline, including Prisma Cloud (TwistLock), IAST/SAST, SonarQube, and Nexus Firewall
Secure Development Coaching: Act as a secure development coach, providing guidance and best practices to development teams to ensure secure coding standards are met
CI/CD Pipeline Enhancement: Offer strategic advice on integrating and enhancing DevSecOps security tools within the CI/CD pipeline to improve overall security posture
Cloud Security: Develop and implement cloud security strategies, ensuring robust protection of cloud-based applications and infrastructure

Required Qualifications:

Software Development Experience: Minimum of 2 years of experience as a software developer with a focus on security architecture
Access Control Protocols: Proficient knowledge of access control protocols such as SAML, OAUTH2, and OpenID Connect
Data Security and Cryptography: Demonstrated experience in data security and cryptography practices
API Security: Proven experience in securing APIs
Container Security: In-depth knowledge of container security practices and familiarity with NIST 800-190 container security guidelines
Cloud Security: Experience in developing and implementing cloud security measures, with a strong understanding of cloud security best practices
Platform as a Service (PaaS): Familiarity with OpenShift PaaS
NIST 800-53 Controls: Experience in implementing NIST 800-53 security controls

Preferred Skills: