DevSecOps Engineer
Mexico City - Paseo
Marsh McLennan
Marsh McLennan is the world’s leading professional services firm in risk, strategy and people. We bring together experts from across our four global businesses — Marsh, Guy Carpenter, Mercer and Oliver Wyman — to help make organizations more...Company:
MarshDescription:
DevSecOps Engineer
We are seeking a DevSecOps Engineer to join our team at Marsh. This role will be based in Mexico City. This is a hybrid role that has a requirement of working at least three days a week in the office. As a DevSecops Engineer at Marsh, you will create and document Secure Infrastructure Solutions and participate in project teams to include designing connectivity and Software Solutions Aligning Security, cost, performance, and customer requirements to reach viable secure solutions.
We will count on you to:
- Lead initiatives related to DevSecOps and Secure-SDLC.
- Enhance the company’s Secure Software development Lifecycle (Secure-SDLC) which in turn will reflect the company’s Application Development Security Policy,
- Select and standardize application security tools. This includes vendor/tool assessments and full POC,
- Integrate Secure-SDLC requirements and other security policy/requirements into the DevSecOps processes,
- Define and enhance application security requirements and standards which must be designed for agile development methods leveraging traditional application architectures as well as cloud architectures and container workloads.
What you need to have:
- 3 years+ DevSecOps and Secure-SDLC work experience
- CISSP, CSSLP, cloud security, DevSecOps automation, or similar is required
- Experience in designing Secure-SDLC processes and relevant tooling to support the processes
- Experience in software/application analysis tools like SAST, DAST, SCA, threat modeling, supply-chain etc.
- Technical hands-on experience in automating and integrating security scan and analysis tools into the DevSecOps pipeline.
- Experience in one programming languages
- Advanced Level of English is a Must
What makes you stand out:
- Identify application security requirements and brainstorm solutions factoring in industry best practices
- Assess the tooling and remediation of threats and vulnerabilities within our software/applications, and the hosting environment
Why join our team:
- We help you be your best through professional development opportunities, interesting work and supportive leaders.
- We foster a vibrant and inclusive culture where you can work with talented colleagues to create new solutions and have impact for colleagues, clients and communities.
- Our scale enables us to provide a range of career opportunities, as well as benefits and rewards to enhance your well-being.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Agile Application security Automation CISSP Cloud CSSLP DAST DevSecOps SAST SDLC Strategy Vulnerabilities
Perks/benefits: Career development Flex hours
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.