DevSecOps (Security) BPCE-SI
Share
Job Location:
Monthly Salary:
Posted on:
18 days ago
Vacancies:
1 Vacancy
Job Summary
We are seeking a skilled DevSecOps Engineer to join our Security this role you will play a critical part in enabling our IT teams to develop and release secure applications by implementing comprehensive Application Security testing solutions and promoting best practices across the organization.
Key Responsibilities:
- Application Security Testing Solutions: Study test deploy and maintain Application Security Testing tools and methodologies including SAST (Static Application Security Testing) SCA (Software Composition Analysis) DAST (Dynamic Application Security Testing) and RASP (Runtime Application Self-Protection).
- Security Scanning: Conduct application security scans on various business applications to identify vulnerabilities and ensure adherence to security standards.
- Collaboration with DevOps: Work closely with DevOps teams and other security professionals to automate application security testing and integrate security controls into the development and release pipelines (CI/CD).
- Code Security Reviews: Collaborate with developers to perform thorough security reviews of the banks applications providing actionable recommendations for vulnerability remediation and mitigation.
- Guideline Development: Draft update and maintain application security guidelines to ensure secure development practices across teams.
- Reporting Platform Development: Develop and maintain a platform for aggregating and reporting application security results enabling better visibility and informed decision-making regarding security posture.
Technical Requirements:
- Development Experience: Minimum of 5 years of experience with one or more programming languages (Java PHP Python etc.).
- Best Practices Knowledge: Strong understanding of software development best practices and an awareness of source code vulnerabilities.
- Protocols Knowledge: Familiarity with HTTP and API protocols to ensure secure data transmission.
- CI/CD Tools: Basic experience with CI/CD tools including GIT Jenkins and Azure DevOps.
- Security Tools Experience: Previous experience with static or dynamic security scanning tools is an advantage.
Language Proficiency:
- Fluency in French is mandatory; proficiency in English is a plus.
Join Natixis the corporate banking management insurance and financial services arm of the BPCE Group the second-largest banking player in France serving 36 million customers through its two networks Banque Populaire and Caisse this role you will contribute to shaping a secure digital environment and protecting the interests of our clients and stakeholders.
If you are passionate about DevSecOps and application security and you thrive in a collaborative innovative environment we encourage you to apply and become a vital part of our dynamic team!
Additional Information :
Our workplace reflects the vibrant spirit of our locations with initiatives such as a Green Transportation Budget electric bikes and a flexible Hybrid Work Policy. We promote wellbeing through the Honolulu Wellness Club a Prayer Room a Lactation Room and themed Villages that inspire creativity and collaboration. Through our ESG and DEI strategies we are commited to being inclusive caring and fair ensuring every voice is heard and valued.
Remote Work :
No
Employment Type :
Full-time
Key Skills
- CCTV
- Customer Service
- Communication skills
- Computer Skills
- ICD Coding
- Military Experience
- Law Enforcement
- NIST Standards
- Security
- DoD Experience
- RMF
- Writing Skills
About Company
Natixis in Portugal is fully integrated in the global organization of Natixis, a French multinational financial services firm specialized in Asset & Wealth Management, Corporate & Investment Banking, Insurance and Payments. A subsidiary of Groupe BPCE, Natixis counts nearly 16.000 emp ... View more
