استخدام senior secops devsecops specialist

توضیحات آگهی

About the Role
We are looking for a proactive and hands on Senior SecOps Engineer to lead the security posture of our servers applications and automation ecosystems In this role you will be responsible for safeguarding our live cloud infrastructure securing in house applications and auditing third party SaaS tools and automation workflows e g n8n GoHighLevel Teza custom webhooks
You will work closely with our core engineering DevOps and operations teams to embed security best practices into our deployment pipelines API integrations and daily workflows
Key Responsibilities
1 Infrastructure Server Security
Design implement and maintain security configurations for cloud servers network perimeters firewalls and VPNs
Enforce Least Privilege Access IAM acnd strict authentication controls across all servers and databases
Perform continuous vulnerability scanning patch management and server hardening Linux Cloud
Set up centralized logging Monitoring and Intrusion Detection Systems IDS IPS to detect and respond to threats in real time
2 Application API Security AppSec
Conduct regular security audits vulnerability assessments and penetration testing on our internal and production applications
Review code and architecture for OWASP Top 10 vulnerabilities SQLi XSS SSRF broken access control etc
Integrate automated security scanning tools SAST DAST Dependency scanning into our CI CD pipelines
Ensure secure API authentication token management and encryption standards in transit and at rest
3 Automation SaaS Integration Security
Audit and secure automated workflows and integration pipelines operating on platforms like n8n GoHighLevel GHL and Teza
Audit webhooks third party API keys secrets management and data flows to prevent unauthorized exposure or data leakage
Establish guidelines for safe usage of low code no code platforms and AI automation integrations
4 Governance Incident Response Compliance
Formulate an Incident Response Plan IRP and serve as the primary point of contact for security breaches or incidents
Conduct periodic security audits for internal software employee access levels and third party SaaS subscriptions
Promote security awareness within the tech team and establish secure coding guidelines
Required Qualifications Experience
Experience 4 years of hands on experience in SecOps DevSecOps or Information Security engineering
Systems Cloud Strong hands on proficiency with Linux server administration Docker reverse proxies Nginx Traefik cloud networking and firewall management
AppSec Pen Testing Proven knowledge of OWASP Top 10 penetration testing methodologies and API security
Secrets Identity Management Experience with IAM OAuth2 JWTs and secure secrets storage e g HashiCorp Vault environment variable encryption
Automation Scripting Proficient in scripting Bash Python or Go to automate security checks and monitoring
Integrations Awareness Familiarity with audit and security practices for webhook heavy workflow automation engines n8n Make Zapier and CRM ERP integrations
Nice to Have Skills
Industry certifications such as CISSP CEH OSCP AWS Certified Security or eJPT
Experience securing self hosted tools e g self hosted n8n analytics dashboards custom web services
Knowledge of database security PostgreSQL Redis Vector Databases
شرکت وبلیغات Weblighat
دسته بندی IT DevOps Server
نحوه همکاری تمام وقت
نوع همکاری حضوری
مدرک تحصیلی مهم نیست
سابقه کار سه تا شش سال
حقوق توافقی
جنسیت مهم نیست
مهارت ها DevOps Docker OWASP
شهر تهران تهران