DevSecOps Engineer, Modus Create

• You're a senior-level professional with over five years in software development, DevSecOps, or security engineering. You're skilled in penetration testing methods, including reconnaissance, scanning, exploitation, and maintaining access. You've worked with tools like Burp Suite, Nmap, and GitHub Advanced Security, and you know how to evaluate risks to assess the overall security posture of systems
• Your knowledge of cryptography covers both symmetric and asymmetric encryption techniques, using protocols such as Diffie-Hellman, El Gamal, 3DES, and AES. You've applied these principles to secure communications, evaluate cryptographic implementation, and data storage across a range of projects
• You're experienced with SIEM systems like IBM QRadar and Splunk for event analysis and correlation. You've also protected cloud environments in GCP, AWS, and Azure, leveraging tools like GCP Security Command Centre and AWS security services
• You're comfortable using Python, shell scripting, or Perl to streamline security processes and enhance testing frameworks. Plus, you have a network engineer’s understanding of LANs, WANs, TCP/IP, and VLANs, backed by hands-on experience monitoring network traffic and responding to incidents
• Some overlap with EST hours daily is expected
• Reliable high-speed internet is a must!

Desirable

• We're looking for an Expert DevSecOps Engineer with deep expertise in GitHub Advanced Security, cryptography, and penetration testing. In this role, you'll work closely with cross-functional teams to offer strategic consulting, end-to-end product development, and tailored security solutions that keep pace with evolving challenges
• Lead and manage GitHub Advanced Security implementations while optimizing CI/CD pipelines with GitHub Actions
• Perform penetration testing assessments, identify vulnerabilities, and recommend practical remediation steps
• Develop and execute a comprehensive security strategy that includes both cryptographic evaluations and penetration testing
• Automate security checks and integrate them seamlessly into development workflows
• Conduct regular security audits and assist with incident response efforts
• Translate customer needs into actionable security requirements while providing training and guidance to developers
• Collaborate with team members across different time zones, ensuring overlap during EST hours