SecOps Engineer at Swapcard

What you’ll be doing

• Own and perform application and infrastructure Security vulnerability management
• Perform Security Pentesting of new features and releases.
• Own and manage the Bug Bounty Platform
• Facilitate and support the preparation of security releases
• Contribute to the Information Security roadmap creation and implementation
• Create and maintain SecOps documentation
• Highly contribute to training other team members on SecOps
• Participate in and support application and Cloud infrastructure security reviews and threat modelling, including code review and dynamic testing
• Maintain SLAs for SOC 2 and ISO 27001 Compliance
• Perform risk assessments for compliance and new releases.

What you should have

• 3+ years experience in Security and SecOps/DevSecOps
• Have experience with Pentesting tools (Burpsuite, Nmap)
• Have experience with Secure Development Lifecycle
• Have experience with SAST (e.g. SonarQube, Snyk)
• Have experience with common software vulnerabilities (OWASP top 10, etc.)
• Have experience with WAF (Web Application firewalls)
• Familiar with DevOps tools (Git, Jira, Jenkins, Github/Gitlab/BitBucket)
• Highly motivated, goal driven, can-do approach

Bonus Points ;-)

• Familiar with Infrastructure tools like Terraform, K8S, Helm, Ansible
• Familiar with modern delivery tools like CDN, Global accelerator
• Have experience with Cloud platform security configuration and deployment (e.g. AWS/Azure)