devsecops EngineerFirecreek Co., Ltd.

Job brief
Do you enjoy working with the top-notch technical stack? Do you want to work to maintain, secure and improve the infrastructure and security of the best-in-class product? Do you enjoy monitoring? Do you love taking up difficult challenges and excelling in them?
If all the answer to the above is yes then we have got the job opportunity of a DevOps Engineer for you. You'll join our agile team and provide best in class support and implementation services for our system.
You must be able to work under pressure and have strong work habits and possess extraordinary career experience in the field of maintaining cloud infrastructure (including security networking, server management, virtualization, operating systems, microservices, middleware, databases and CI/CD) in an online application environment. This role will involve rolling out new systems, maintaining, upgrading, replacing, automating, improving performance and securing the platform.
Who we are
We are an end-to-end, cloud-based property management platform with a functionally rich suite of apps, skillfully designed to boost efficiency, save time and focus on what really matters. We develop our product with lots of passion and love combined with industry experience. We are a multi-cultural company with a multi-talented team and we are proud of the work we produce.
Job Responsibilities
Ensure that the Static Application Security Testing (SAST) environment is performing optimally
Provide education and guidance about SAST tools and process best practices
Ensure compliance with applicable Policies, Standards, Requirements and Directives
Assist with audits to demonstrate compliance
Schedule, scope and prioritize SAST assessments of applications
Identify, document, rate, and communicate vulnerabilities to responsible teams
Reproduce, demonstrate and retest vulnerabilities
Maintain awareness of security issues amongst development community
Continually improve SAST process and environment
Provide expertise in Continuous Test/Integration/Deployment platforms
Requirement
3+ years of application security experience
Must be familiar with OWASP top ten understanding of vulnerability governance and reporting
Working experience with Software Composition Analysis (SCA) tools - Black Duck, Sonatype Nexus, etc.
Working experience with Static Application Security Testing (SAST) tools - Fortify, Checkmarx, Veracode, etc.
Experience in consuming APIs
Experience with cloud security - AWS Cloud preferred
Experience with code repository management platforms - GitHub, BitBucket, GitLab
Experience developing cloud native CI/CD workflows and tools, such as Jenkins, Circle CI and/or GitLab
Experience with infrastructure automation tools and coding/scripting (i.e. ansible, terraform, python, Shell script)
Fluent in Linux OS (i.e. Ubuntu, Debian)
Must be a team player with great interpersonal skills
 
Benefits
With a relaxing office atmosphere, we believe in a work hard and play hard ethos with challenges to your skillset each day.
Competitive salaries
Health + Life insurance
We give you time to learn new technologies and we'll keep pushing your abilities
Start work before 10 am
End of the month entertainment
We like to have a relaxed office with no stress
Modern work practices, office environment with freedom to be creative
Little to no overtime, no weekend work
A 2-minute walk from Saladaeng BTS, lots of food options!
 
How to apply
Come and join our friendly and skilled team by sending in your resume to:[Protected Info]