-
›
- Careers ›
- Careers in America ›
-
Technical lead
Job Description
Technical lead
Job Summary
-
Location: Texas
-
Project role: Technical lead
-
Skills: DevOps Others
-
No. of positions: 1
Job description:
Job Title: DevSecOps Engineer (Cloud Security Compliance Focus)Department: Cloud CISO EngineeringInformation SecuritySummary:We are seeking a highly motivated and security-conscious DevSecOps Engineer to join our team. You will be a critical part of our security and compliance efforts, ensuring the integrity and confidentiality of our systems and data. Your hands-on experience with Istio, Envoy, Kubernetes, and Terraform, coupled with your security penetration testing or automated API testing experience, makes you an ideal candidate to drive our security initiatives in a cloud-native environment.Responsibilities:Security Architecture and Implementation:Design and implement secure cloud-native architectures with a focus on Istio service mesh and Kubernetes container orchestration.Harden and secure containerized workloads and microservices using best practices.Leverage Terraform for infrastructure as code (IaC) deployments, ensuring security is baked into the process from the start.Implement security controls and monitoring solutions to detect and respond to potential threats.Compliance and Security Auditing:Collaborate with security and compliance teams to ensure adherence to industry standards and regulations.Conduct regular security audits and penetration testing to identify vulnerabilities and recommend remediation strategies.Develop and maintain documentation for security policies, procedures, and incident response plans.DevSecOps Integration:Integrate security practices and tools into the CICD pipeline to automate security testing and vulnerability scanning.Implement and maintain security tools for code analysis, dependency management, and vulnerability tracking.Promote a culture of security awareness and collaboration within the development and operations teams.Incident Response:Participate in incident response activities, including investigation, containment, and recovery.Analyze security incidents and identify root causes to prevent future occurrences.Qualifications:Hands-on Experience:Strong practical experience with Istio service mesh, Envoy proxy, Kubernetes, and Terraform.Proficiency in security penetration testing methodologies or automated API testing tools.Familiarity with cloud security best practices and cloud-native technologies.Security and Compliance Knowledge:Understanding of security principles, vulnerabilities, and mitigation techniques.Knowledge of industry security standards and compliance regulations.Experience in conducting security audits and vulnerability assessments.Passion for Security:A strong desire to stay abreast of the latest security trends and technologies.Enthusiasm for sharing knowledge and promoting security best practices within the team.Strong Communication and Collaboration:Ability to effectively communicate complex security concepts to technical and non-technical stakeholders.Excellent teamwork and collaboration skills, working effectively with cross-functional teams.Additional Desirable Skills:Experience with cloud platforms such as AWS, Azure, or GCP.Programming/scripting skills (Python, Java, Bash, etc.)Certifications in security and cloud technologies (CISSP, CCSP, etc.) Thanks
- To be responsible for providing technical guidance or solutions ;define, advocate, and implement best practices and coding standards for the team.
- To develop and guide the team members in enhancing their technical capabilities and increasing productivity
- To ensure process compliance in the assigned module, and participate in technical discussionsorreview as a technical consultant for feasibility study (technical alternatives, best packages, supporting architecture best practices, technical risks, breakdown into components, estimations).
- To pre
Disclaimer
HCL is an equal opportunity employer, committed to providing equal employment opportunities to all applicants and employees regardless of race, religion, sex, color, age, national origin, pregnancy, sexual orientation, physical disability or genetic information, military or veteran status, or any other protected classification, in accordance with federal, state, and/or local law. Should any applicant have concerns about discrimination in the hiring process, they should provide a detailed report of those concerns to secure@hcl.com for investigation.