استخدام DevSecOps Engineer
شرح موقعیت شغلی
In the story of Snappfood, we believe in creating value that goes beyond the ordinary. We are willing to establish innovative tendencies and are eager to have you on our team to help us get through our business challenges with creativity, intelligence, and agility.
We are waiting for you to continue this story.
We are waiting for you to continue this story.
Responsibilities:
- Embed security practices into software, data/ML, and AI-assisted development and deployment pipelines.
- Collaborate with development, data, and ML teams to promote secure coding, model delivery, and AI integration practices.
- Implement security controls and monitoring across the SDLC, MLOps lifecycle, and AI/agent workflows.
- Design, build, and maintain security toolchains, internal products, services, and integrations for automated testing, secure delivery, and controlled agentic workflows.
- Write production-quality code to integrate security controls into Git and CI/CD workflows, with testing, documentation, observability, and support.
- Implement continuous security monitoring for applications, infrastructure, data/ML platforms, and approved AI services.
- Respond to security incidents, including AI-related misuse or data leakage, and conduct post-incident analysis.
- Work closely with development, operations, security, data, and ML teams to address vulnerabilities and AI-security concerns.
- Conduct risk and vulnerability assessments covering applications, infrastructure, data/ML systems, and AI/agent workflows.
- Mitigate identified risks, including prompt injection, data leakage, unsafe tool use, and excessive agent privileges.
Requirements:
- Bachelor's or Master's degree in Computer Science, Software Engineering, Information Security, Information Technology, or a related field.
- Builds security tools and integrations in Go, PHP, .NET/C#, Python, and Bash.
- Experience with SAST tools such as CodeQL, plus DAST, SCA, secret, API, and container scanning.
- Kubernetes and Docker security, including identity, network policy, and runtime controls.
- Experience with Ansible and configuration management; infrastructure-as-code knowledge is beneficial.
- Secure Git and CI/CD workflows: branching, reviews, protected branches, releases, runners, identities, secrets, artifacts, SBOMs, and provenance.
- Understanding of data pipelines, notebooks, model artifacts, MLOps lifecycles, and related risks.
Benefits:
- Credit for: Vacations, Gym, Therapy
- Social Security & Complementary Insurance
- Educational platform of advanced courses
- Snappfood's Discount codes
مهارتهای مورد نیاز
- Docker
- CI/CD
- DevSecOps
حداقل سابقه کار
- سه تا شش سال
جنسیت
- مهم نیست
وضعیت نظام وظیفه
- مهم نیست