شركة SIGMA تعلن عن وظيفة مهندس Junior DevSecOps في الرياض

Job Summary

The Junior Resident DevSecOps Engineer supports day-to-day DevSecOps operations and application security activities under the guidance of the Senior Resident DevSecOps Engineer and the security team. The role focuses on operating security tools, assisting with vulnerability management, maintaining security controls, and supporting secure software development practices.

Key Responsibilities
CI/CD Security Operations
Assist in deploying, configuring, and maintaining CI/CD security tools.
Support security scanning processes within development pipelines.
Monitor automated security testing results and escalate findings when necessary.
Vulnerability Management Support
Assist with vulnerability identification, tracking, and remediation follow-up.
Coordinate with development teams regarding security findings.
Maintain vulnerability records and remediation status reports.
Security Tool Administration
Support configuration and validation of:
SAST tools
SCA tools
DAST tools
IAST solutions
IaC security scanning tools
Secrets management platforms
Perform routine maintenance and health checks of security tools.
Documentation & Reporting
Maintain technical documentation and operational records.
Prepare weekly and monthly reports related to security activities.
Support metrics collection and dashboard updates.
SDLC Security Support
Assist in secure development initiatives.
Support security reviews and validation activities.
Participate in knowledge-sharing and awareness programs.
Required Qualifications
Bachelor's degree in Computer Science, Information Security, Information Technology, or related field.
2-4 years of experience in Cybersecurity, DevSecOps, Application Security, or Software Development.
Basic understanding of SDLC and CI/CD concepts.
Familiarity with GitLab, Azure DevOps, Jenkins, or similar platforms.
Knowledge of vulnerability management processes.
Understanding of OWASP Top 10 and secure coding practices.
Preferred Certifications
DevSecOps Foundation
AZ-400 (Associate level knowledge)
AWS Cloud Practitioner / AWS Security Fundamentals
CSSLP (or progress toward certification)
Secure Coding Training (OWASP, SANS, Secure Code Warrior)
Training in BSIMM, OWASP SAMM, or NIST SSDF
Resource Summary for Commercial Proposal