Mid level DevSecOps

A Fox IT é uma empresa de Consultoria Portuguesa que está pelo 5º ano consecutivo no TOP das 5% melhores PME´S em Portugal. A nossa Missão é trazer uma nova abordagem ao mercado das TI, promovendo uma troca mais justa entre nós, os nossos consultores e os nossos clientes. Mais recentemente recebemos a certificação Happy at Work, reconhecimento de que valorizamos as nossas pessoas.

Descrição da Função

Responsibilities: Act as the upper intermediate/senior Cloud DevSecOps engineer for the continuous analysis and refinement of configuration policies to enforce least privilege in AWS, Azure, and GCP environments. Collaborate closely with security, software engineering, and DevOps teams to strengthen the organization’s overall security posture. Provide mentorship and direction to more junior DevSecOps team members. Work directly with development teams (service owners) to execute comprehensive QA validation, covering both functional and performance aspects. Stay up to date on security trends, vulnerabilities, compliance regulations, and emerging tools, advocating for continuous improvement in security practices. Requirements: 2-4 years of proven experience with cloud platforms (AWS, Azure, or GCP), with strong expertise in identity, access management, container security (Kubernetes), and cloud networking. Proficient in spoken and written English. Solid understanding of secure software development lifecycle (SDLC) practices, DevSecOps principles, Infrastructure as Code (Terraform or similar), and integrating security controls into CI/CD pipelines. Practical skills in scripting/automation (Python, PowerShell, or similar) for automating security tasks. Excellent communication skills, with the ability to explain technical security risks and solutions to both technical and non-technical stakeholders. Strong problem-solving abilities with a collaborative approach to addressing security challenges. Nice to Have: Experience with Cloud Security Posture Management (CSPM) tools such as Prisma Cloud, Wiz, BitSight, SecurityScorecard, Black Duck, etc. Knowledge of application security tools and methodologies, including SCA/SAST/DAST solutions (especially Snyk). Solid experience with container technologies like Docker and deep expertise managing Kubernetes clusters. Experience using AI tools to accelerate security-related work. Familiarity with Crossplane for infrastructure management.

Localização

• Todo o país, Portugal