DevSecOps Engineer, Modus Create

• You're a senior-level professional with over five years in software development, DevSecOps, or security engineering
• You're skilled in penetration testing methods, including reconnaissance, scanning, exploitation, and maintaining access
• You've worked with tools like Burp Suite, Nmap, and GitHub Advanced Security, and you know how to evaluate risks to assess the overall security posture of systems
• Your knowledge of cryptography covers both symmetric and asymmetric encryption techniques, using protocols such as Diffie-Hellman, El Gamal, 3DES, and AES
• You've applied these principles to secure communications, evaluate cryptographic implementation, and data storage across a range of projects
• You're experienced with SIEM systems like IBM QRadar and Splunk for event analysis and correlation
• You've also protected cloud environments in GCP, AWS, and Azure, leveraging tools like GCP Security Command Centre and AWS security services
• You're comfortable using Python, shell scripting, or Perl to streamline security processes and enhance testing frameworks
• Plus, you have a network engineer’s understanding of LANs, WANs, TCP/IP, and VLANs, backed by hands-on experience monitoring network traffic and responding to incidents

Desirable

• We're looking for an expert DevSecOps Engineer with deep expertise in GitHub Advanced Security, cryptography, and penetration testing
• In this role, you'll work closely with cross-functional teams to offer strategic consulting, end-to-end product development, and tailored security solutions that keep pace with evolving challenges
• Lead and manage GitHub Advanced Security implementations while optimizing CI/CD pipelines with GitHub Actions
• Perform penetration testing assessments, identify vulnerabilities, and recommend practical remediation steps
• Develop and execute a comprehensive security strategy that includes both cryptographic evaluations and penetration testing
• Automate security checks and integrate them seamlessly into development workflows
• Conduct regular security audits and assist with incident response efforts
• Translate customer needs into actionable security requirements while providing training and guidance to developers
• Collaborate with team members across different time zones, ensuring overlap during EST hours
• Mentoring and coaching both clients and Modus teammates from the comfort of home
• Deep-diving into customer needs and translating them into actionable requirements
• Exploring new tech and continuously learning—because software is always evolving!
• Sharing your knowledge and participating actively in the community
• Some overlap with EST hours daily is expected
• Reliable high-speed internet is a must!