FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Senior DevSecOps Analyst
Beyond Soluções. Work within Systems Architecture as one of the primary technical references for DevSecOps .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in integrating security within AWS environments, focusing on DevSecOps practices, vulnerability management, and CI/CD pipeline security. Proficient in defining security standards and automating controls to enhance security governance and incident response.
Highest-signal resume keywords
DevSecOps Strategy DevelopmentAWS Security ManagementVulnerability ManagementCI/CD Pipeline SecurityInfrastructure as Code
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
AWS SecurityDevSecOpsVulnerability RemediationInfrastructure as CodePythonBashCI/CD PipelinesContainer SecuritySIEM SolutionsSecurity Governance
Soft Skills
MentoringTechnical CommunicationCollaboration
Tools & Technologies
AWSTerraformCloudFormationJenkinsGitLab CISplunkWazuhSonarQubeSnykTrivy
Industry Keywords
Security Pillar of AWS Well-Architected FrameworkNIST CSFISO 27001LGPDCIS AWS Foundations Benchmark
Tech Stack
Tools & technologiesAWSCloudEC2JenkinsPythonSplunkTerraform.NET
About the role
Key responsibilities & impact- Work within Systems Architecture as one of the primary technical references for DevSecOps
- Integrate security end to end into the development lifecycle and the contracting company’s AWS infrastructure
- Define standards, guardrails, and automated controls for developing and delivering solutions with speed, security, and efficiency
- Consolidate visibility into security findings in the SIEM
- Prioritize the remediation of vulnerabilities and insecure configurations
- Standardize security gates across CI/CD pipelines
- Define and evolve the DevSecOps strategy and secure CI/CD pipelines with SAST, DAST, SCA, secrets scanning, and IaC scanning
- Operate and enhance AWS threat detection and auditing mechanisms, integrating events into the SIEM
- Lead security incident response
- Identify, diagnose, remediate, and automate the remediation of vulnerabilities and insecure configurations in AWS infrastructure
- Establish and evolve security governance for AWS accounts using policy as code and the principle of least privilege
- Lead vulnerability management and Threat Modeling for new products
- Prioritize actions based on risk, define remediation SLAs, and report security metrics to leadership
- Promote a DevSecOps culture, act as a mentor and technical reference, and contribute to training programs and Security Champions initiatives alongside Squads
Requirements
What you’ll need- Bachelor’s degree in Computer Science, Computer Engineering, Software Engineering, Information Security, or a related field
- More than 5 years of professional experience in DevOps and Information Security in AWS environments
- At least 3 years focused on DevSecOps or cloud security
- Experience working on complex, high-impact projects
- Strong experience with AWS security, including IAM, IAM Identity Center, Organizations, SCPs, KMS, Secrets Manager, WAF, and practices related to the Security pillar of the AWS Well-Architected Framework
- Knowledge of GuardDuty, Inspector, CloudTrail, Security Hub, and Config
- Experience troubleshooting and resolving AWS infrastructure issues, including VPC, Security Groups, IAM, EC2, EKS, ELB, S3, and RDS
- Experience with SIEM solutions such as Splunk, Wazuh, OpenSearch, or equivalent, including event ingestion and correlation, and the creation of detection rules and alerts
- Knowledge of container security in EKS and ECR, including image hardening, RBAC, Network Policies, and IRSA
- Experience with Infrastructure as Code using Terraform and/or CloudFormation, as well as analysis tools such as Checkov or tfsec
- Experience with CI/CD pipelines using Jenkins and/or GitLab CI and SAST, DAST, and SCA tools such as SonarQube, Snyk, Trivy, and OWASP ZAP
- Knowledge of Python, including boto3, and Bash for automation
- Ability to review C#/.NET Core code from a security perspective
- Technical English proficiency for reading, writing, and professional communication
- Preferred: knowledge of SBOM, Sigstore/Cosign, SLSA, OPA/Gatekeeper, Kyverno, Falco, AWS Control Tower, IAM Access Analyzer, Amazon Detective, Amazon Security Lake, Microsoft Sentinel, Microsoft Entra ID, Microsoft Defender for Cloud, STRIDE Threat Modeling, OWASP SAMM, NIST CSF, CIS AWS Foundations Benchmark, ISO 27001, LGPD, and Brazilian Central Bank and CVM regulations
Benefits
Comp & perks- Profit-Sharing and Results-Based Bonus (PLR)
- Meal and Food Allowance via Flash
- Transportation Allowance
- Shuttle vans providing access to Fradique Coutinho and Vila Madalena stations
- Bradesco Anbima health and dental insurance—with no cost for the employee
- Beep Saúde: at-home vaccinations and medical tests
- Orienteme platform: mental health and well-being support
- Pharmacy discounts
- ASD Support Program
- Prudential Life Insurance
- TotalPass
- Corporate University: development tracks to deepen technical knowledge of business and securitization
- Empresa Cidadã Program: 180-day maternity leave and extended 20-day paternity leave
- Childcare/nanny allowance
- SESC partnership
- Discount Club