DevSecOps Engineer

Introduction
Rise to meet the challenge of solutioning the world’s problems. Software engineers at IBM get to see their work in the real world improving the current state of disaster preparedness and providing more accurate medical solutions around the globe. You will be challenged to think outside the box work across organizations and engineer creative solutions that scale to the demands of our ever-growing customer base. Take ownership and be actively engaged in the entire product lifecycle – from quick hits to full feature development.

Your Role and Responsibilities
We are looking for DevSecOps Engineer to work on security related aspects of dynamically evolving offerings from IBM watsonx product family.

As a DevSecOps Engineer for watsonx offerings you will mainly responsible for maintaining security of delivered product focusing mainly on vulnerability management and its aspects like: CVE analysis & reporting scan tooling automation etc. The ideal candidate for this position should be consistent and self-disciplined in their work. You should be also highly driven to achieve results in fast-paced environment.

A successful individual for this role should possess:

• Self-driven and a desire to continually learn
• Strong analytical and problem-solving thinking
• Ability to take ownership of problems to resolution and tasks to completion
• Ability to jump into multiple source code bases

For an overview of the products see https://www.ibm.com/watsonx

Required Technical and Professional Expertise

• Professional experience with coding in scripting languages (shell Python)
• Experience in package vulnerability management (CVEs) in delivered software solutions
• Experience working with git and any CI/CD automation tool (Jenkins GitHub Actions)
• Experience working with containerized environments (Docker + Kubernetes/Openshift)
• Fluent in written and spoken English

Preferred Technical and Professional Expertise

• Experience working with security scanning tooling in areas of: SCA SAST DAST etc..
• Knowledge of different security aspects like threat modelling & risk assessment
• Experience on micro-service architecture and development
• Experience with cloud environments