layiq

/la·yiq/adjective

worthy; deserving; fitting; suitable.

A role, opportunity, or path that merits attention, time, and pursuit.

Senior DevSecOps Engineer at Northwestern Mutual | LAYIQ

Engineer solutions with a focus on automation to reduce manual and repetitive tasks
Guide and advise application and engineering teams in the areas of Application and Cloud Security
Operationally support Application & Cloud Security tools integrated into our software development lifecycle. Examples include SAST, DAST, SCA, CSPM, and infrastructure vulnerability scanners
Actively monitor, assess and recommend tactical and strategic initiatives based on new and emerging threats posing risk to our company
Stay apprised of current and proposed security changes impacting regulatory, privacy and security industry best practices
Implement remediation efforts after security assessment findings outline weaknesses requiring attention
Mentor other staff members to ensure consistency, quality and productivity of deliverables
Further impress us with: Your passion for all things security
Your ability to employ a flexible and constructive approach to solving problems
Knowledge of application and cloud security principles
Experience with implementing secure-by-default architecture
Experience automating and improving manual processes
Relevant certifications from GIAC, ISC(2) and other recognized cybersecurity industry organizations
Skills You Have: Application Security - Introduces security standards during application development and implements security procedures to protect applications in production. Utilizes knowledge to implement authentication for applications that contain sensitive data. Ensures that no PII/PCI information is logged. Conducts PenTest for external facing apps.
Adaptive Communication - Formulates strategies to be used to convey complex information about services, products, systems, or processes to targeted audiences; communicates and liaises between technical and non-technical audiences.
Cloud Security - Creates a set of policies, technologies, applications, and controls across the cloud ecosystem to protect virtualized IP, data, and the cloud computing infrastructure.
DevOps - Applies continuous integration and delivery to implement applications and services at a higher velocity.
Engineering Expertise & Practices - Applies specialized experiences in different facets of engineering, including data, applications, cyber, systems, operations, product, security, and testing, along with technical aptitude to adapt new expertise as they become relevant through an understanding of underlying engineering principles.
Threat Awareness - Utilizes knowledge of threats to support tracking of common and emerging security threats to increase awareness of potential risks and the protections against them.
Vulnerability Assessment & Management - Conducts assessments of threats and vulnerabilities to identify the technical outcome if a vulnerability is exploited and determines deviations from acceptable configurations, enterprise or local policy; assesses the level of risk and develops and/or recommends appropriate mitigation countermeasures in operational and nonoperational situations.

Senior DevSecOps Engineer

Employer job description

About the Job:

What You'll Bring to the Role:

What you'll get to do:

Compensation Range:

Geographic Specific Pay Structure:

Structure 110:

Structure 115:

Equal opportunity and accommodations

About this listing