Senior DevSecOps Engineer, Ivanti
IT service and asset management software
Open for applications
IT service and asset management software
1001+ employees
Open for applications
1001+ employees
Company mission
To be a global technology leader enabling organisations to thrive in the Everywhere Workplace.
Role
Who you are
- 8+ years of experience in the area/s of Development, DevOps, application security
- Good understanding of SSDLC as well as development and integration tools and technologies uses as part of CI/CD pipelines
- Ability to work in a self directed environment that is highly collaborative and cross functional
- Knowledge of security concepts and terminology. Practical experience in securing software and defensive programming
- Want to make a difference
- You are interested in automated ways of detecting software weaknesses and vulnerabilities. What makes certain code vulnerable and how to remediate the situation. How to build security in depth
- You are motivated and quick learner who likes to understand new technologies
- You are familiar with at least one widely used programming language (C# is currently good fit for the team) and are able pick up other programming languages
- You understand software development life cycle and how to shift left security activities
- Can explain complex topics to others. Can communicate with groups included in the lifecycle (Development, DevOps, SRE, Product Management)
- Can work with version control, perform code review, understand branching
- You have created and edited CI/CD pipelines. Using bash/sh/pwsh scripts in YAML and other codified pipeline styles
- You can sure the automated tools are used appropriately in the pipelines. Understand containerization in the build context as well as in runtime context
- You know how to work with public security sources (NVD database, CWE, vendor specific information)
- For this role you should have a record of individual contributions without supervision and helping others
What the job involves
- As a DevSecOps Engineer within our Product Security team, you will occupy an important role in ensuring the security, stability and scalability of our software products while contributing to the rapid development of new and innovative solutions
- You will collaborate closely with cross-functional teams, including developers, security researchers, and operations professionals to create and maintain a secure, efficient, and automated development pipeline
- Collaborate with development, operations, and security teams to design, implement, and maintain an effective DevSecOps strategy and process
- Operate Dynamic and Static Code Analysis as well Software Composition Analysis (SAST/SCA/ DAST) tools
- Integrate security tooling into the CI/CD pipelines and development lifecycle
- Monitor and tune the performance and tuning of SCA, SAST, DAST, IAST
- Build and manage connectors to ticketing systems like Jira, ADO
- Security Automation: Develop and maintain security automation tools and scripts to streamline security processes as well as ensure consistent application of security controls across deployment pipelines and infrastructure
- Champion continuous improvement of DevSecOps practices, processes, and tools
- Create and maintain documentation for security tools, processes, and procedures
Our take
Ivanti, a well-established leader in IT and asset management solutions, has evolved significantly since its founding as LAN Systems in 1985. After merging with HEAT Software in 2017 to become Ivanti, the company continued to grow by acquiring smaller firms and expanding its reach and product offering.
Today, Ivanti is known for its flagship product, the Ivanti Neurons IT Platform, which uses machine learning to proactively detect and resolve IT issues. In addition, the company provides a range of cybersecurity solutions, including VPNs and real-time security surveillance, to help businesses safeguard their networks.
Despite facing challenges, including a data breach involving its subsidiary companies MobileIron and Pulse Secure, Ivanti has taken proactive steps to enhance security. In response to vulnerabilities that allowed hackers to exploit VPN systems, Ivanti has strengthened its security with zero trust models and Unified Endpoint Management tools to better protect its customers.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (2 rounds)
Jan 2005
$35m
SERIES B
Jan 2000
$5.6m
SERIES A
Total funding: $40.6m
Company HQ
South Jordan, UT
Leadership
Jeff Abbott
(CEO)Initially joined Ivanti as the President in 2020 before becoming the CEO in 2021. Prior to this, they were the Executive Vice President at Infor for 11 years.
Share this job
View 2 more jobs at Ivanti