IBM Cloud Object Storage DevOps Engineer

Introduction
At IBM work is more than a job – it’s a calling: To build. To design. To code. To consult. To think along with clients and sell. To make markets. To invent. To collaborate. Not just to do something better but to attempt things you’ve never thought possible. Are you ready to lead in this new era of technology and solve some of the world’s most challenging problems? If so lets talk.

Your Role and Responsibilities
The IBM Cloud Object Storage (COS) group is looking for a technical talented innovative and enthusiastic DevOps Engineer who has experience in Security and Compliance to lead and drive automation of compliance security awareness training applying best practices for secured development across our growing portfolio of next generation COS components/services for IBM Cloud.

Security is something that every development team needs to incorporate into every phase of their product development life cycle and the Security and Compliance Focal is expected to ensure security is built into the design planning implementation and execution of our network services.

Required Technical and Professional Expertise

• 5+ years of demonstrated experience in successful driving and execution of compliance programs for common IT security standards/regulations: SOC1/2/3 ISO27K HIPAA PCI FBA (formerly FFIEC) FedRAMP GDPR etc.
• 5+ years of working experience with designing/building cloud software and infrastructure.
• Expert knowledge of all layers of the OSI model most importantly the network (layer 3) and application (layer 7).
• Domain expertise in cloud software and infrastructure technologies.
• Strong knowledge and understanding in penetration testing methodologies and exploits (web applications containers APIs network devices databases operating systems and various cloud technologies).
• Strong knowledge and understanding of offensive cybersecurity operations and defensive integrations including enumeration and exploitation of various cloud-based technologies and development of secure applications.
• Strong ability to communicate highly technical aspects to Executives IT staffs CISO team auditors respectively.
• Strong experience with various scripting languages (Python Ruby Bash etc.).
• Familiarity with serverless services containerization and other cloud technologies.
• Strong familiarity with OWASP Top Ten NIST CIS and MITRE ATT&CK
• 5+ years of demonstrating experience in system or application administration role(s).

Preferred Technical and Professional Expertise

• 7+ years of demonstrated experience in successful driving and execution of compliance programs for common IT security standards/regulations: SOC1/2/3 ISO27K HIPAA PCI FBA (formerly FFIEC) FedRAMP GDPR etc.
• 7+ years of working experience with designing/building cloud software and infrastructure.
• Expert knowledge of all layers of the OSI model most importantly the network (layer 3) and application (layer 7).
• Domain expertise in cloud software and infrastructure technologies.
• Expert knowledge and understanding in penetration testing methodologies and exploits (web applications containers APIs network devices databases operating systems and various cloud technologies).
• Expert knowledge and understanding of offensive cybersecurity operations and defensive integrations including enumeration and exploitation of various cloud-based technologies and development of secure applications.
• Expert ability to communicate highly technical aspects to Executives IT staffs CISO team auditors respectively.
• Expert experience with various scripting languages (Python Ruby Bash etc.).
• Deep understanding and implementation with serverless services containerization and other cloud technologies.
• Domain expertise with OWASP Top Ten NIST CIS and MITRE ATT&CK.
• 7+ years of demonstrating experience in system or application administration role(s).