DOM.RF
DevSecOps for the Secure Systems Development Team
Work format: remote possible
☑️ Responsibilities
- Develop information security requirements for container infrastructure (Kubernetes) and CI/CD (GitLab CI), and monitor their execution
- Ensure the security of the container platform: protective mechanisms, configuration control, access and secrets management
- Ensure the security of software build and delivery processes: protection of build infrastructure, embedding security checks into pipelines
- Conduct monitoring, identify and respond to information security incidents in container environments, integrating with existing information security processes (SIEM/SOC, response regulations); vulnerability management
- Develop security standards and policies, conduct audits, and oversee the remediation of findings
- Lead the direction: planning, team management, interaction with IT
☑️ Candidate Requirements
- Deep knowledge of Kubernetes security (RBAC, network policies, hardening, runtime protection)
- Experience in securing GitLab-based CI/CD: runner and secrets security, integration of scanners (SAST/DAST/SCA) into pipelines
- Practical SecOps experience: threat detection (SIEM), incident response, vulnerability management
- Understanding of information security processes (incident management, risk management)
Contacts: recruiter contact
