DevSecOps

Description

Job Summary: We are seeking a DevSecOps professional with strong technical insight and automation orientation to integrate security into development and strengthen the security posture. Key Highlights: 1. Promote DevSecOps practices and integrate security into the development lifecycle. 2. Collaborate with multidisciplinary teams to impact digital security. 3. Participate in strategic Cybersecurity projects. At **FYG – For Your Growth**, we are supporting a major financial group in searching for a **DevSecOps** professional to join its Cybersecurity team. We seek a candidate with solid technical expertise and a strong automation focus, capable of integrating security from the earliest stages of development and supporting platform evolution with emphasis on prevention, scalability, and best practices. If you are motivated to work in high-criticality environments, collaborate with multidisciplinary teams, and deliver real impact on the security of digital products and services, this opportunity may be right for you. #### **What will be your purpose?** Drive DevSecOps adoption across the organization by integrating security controls throughout the software development lifecycle, automating processes, and strengthening the security posture of applications and infrastructure. #### **Key Challenges** * Integrate security controls into CI/CD pipelines and development processes. * Implement and automate security analysis tools such as SAST, DAST, SCA, and Infrastructure-as-Code (IaC) scanning. * Promote adoption of Secure Development practices under a Shift-Left approach. * Participate in vulnerability identification, prioritization, and remediation. * Collaborate on incident response related to applications and infrastructure. * Administer and optimize security tools within the DevOps ecosystem. * Work cross-functionally with Development, Infrastructure, Architecture, and Cybersecurity teams to embed security by design. * Document security standards, procedures, and configurations. * Propose continuous improvements in automation, processes, and security controls. #### **What are we looking for?** * Professionals with at least **3 years of experience** in DevSecOps, Application Security, or Infrastructure Security roles. * Experience implementing security controls in CI/CD environments. * Knowledge of SAST, DAST, SCA, IaC analysis, and vulnerability management tools. * Experience working with security frameworks and methodologies such as **NIST, CIS Controls, and Zero Trust**. * Knowledge of **IAM (Identity & Access Management)** and cloud security. * Ability to interact with technical teams across disciplines and foster a collaborative security culture. * Technical English proficiency for reading documentation and analyzing tools. ##### **Nice-to-have experience includes** * Regulated environments (BCRA, PCI DSS, ISO 27001 or other security standards). * GitLab CI/CD. * Terraform. * Kubernetes. * Cloud platforms (AWS and/or Azure). * Certifications related to DevSecOps, Cloud Security, or Cybersecurity. #### **Education** * Systems Engineering, Systems Degree, Computer Science, or related fields. #### **What does the company offer?** * Join a major financial group focused on technological innovation. * Participate in strategic Cybersecurity projects. * Excellent employment conditions under the banking collective agreement. * Full-time hybrid work model. * Opportunities for professional development and continuous training.