Location: Bratislava
Develop, deploy, and operate cybersecurity solutions (systems, assets, software, controls, and services) on infrastructures and products.
DevSecOps Engineer provides cybersecurity-related technical development, integration, testing, implementation, monitoring of cybersecurity solutions, enterprise solutions, business line developments or internally developed solutions. Ensures adherence to specifications and conformance requirements, assures sound performance, and resolves technical issues required in the organization’s business line and cybersecurity-related solutions (systems, assets, software, controls, and services), infrastructures and products.
Description of responsibilities:
- Reinforce and strengthen servers’ security.
- Contribute to the implementation of MITRE ATT&CK matrix to improve the sustainability of the organizational cyber security.
- Develop, implement, maintain, upgrade, test cybersecurity products.
- Provide cybersecurity-related support to users, business line software developers and internal customers.
- Integrate cybersecurity solutions and ensure their sound operation.
- Securely configure systems, services, and products.
- Maintain and upgrade the security of systems, services, and products.
- Implement cybersecurity procedures and controls.
- Monitor and assure the performance of the implemented cybersecurity controls.
- Document and report on the security of systems, services, and products.
- Work close with the IT/OT personnel on cybersecurity-related actions.
- Implement, apply, and manage patches to products to address technical vulnerabilities.
- Ensure continuous improvement of cyber security in Avia Solutions Group.
Experience:
- At least 5 years’ work experience in IT security, cyber security, or information security fields.
- Bachelor’s Degree in Computer Science, Engineering, or related field.
- Hands-on experience in systems’ security and their interaction in a heterogenous IT.
- Previous work experience in EDR, XDR, SIEM, IDS, IPS.
- Extensive expertise in troubleshooting.
- Common understanding of SOC (Security Operations Center) capabilities.
- Knowledge of ISO27k, NIST 800-53, CSC20, ENISA Threat Landscape, and CIS benchmarks.
- Ample experience with virtualization (VMWare vCenter, ESXi, or similar).
- Proven experience in automation and configuration management.
- Experience with backup solutions.
- Good knowledge of collaboration tools (e.g., SharePoint, Teams, Confluence, JIRA).
Key skills:
- Communicate, present and report to relevant stakeholders.
- Integrate cybersecurity solutions to the organization’s infrastructure.
- Configure solutions according to the organization’s security policy.
- Assess the security and performance of solutions, computer networks.
- Develop code, scripts, and programs.
- Identify and solve cybersecurity-related issues.
- Collaborate with other team members and colleagues.
Key knowledge:
- Secure development lifecycle.
- Computer programming.
- Operating systems security.
- Computer networks security.
- Cybersecurity controls and solutions.
- Offensive and defensive security practices.
- Secure coding recommendations and best practices.
- Cybersecurity recommendations and best practices.
- Testing standards, methodologies, and frameworks.
- Testing procedures.
- Cybersecurity-related technologies.
- English (B2 or higher).
What do we offer?
- MultiSport card is your key to over 2700 sports facilities in Slovakia and the Czech Republic.
- One extra day off on your birthday.
- Snack day twice a month.
- Financial benefit to support your health, sport and beauty activities and to sponsor cultural activities and entertainment.
- Referral Bonus up to 1000 EUR.
- Daily food allowance and refreshments in the office.