Senior DevSecOps Engineer (Blue Team)

The Senior DevSecOps Engineer at Amartha is responsible for spearheading multiple Information Security programs, identifying emerging security threats, and recommending strategies to mitigate vulnerabilities. They will work closely with various internal and external teams to implement robust security solutions while performing proactive investigations into security weaknesses.

To qualify for the Senior DevSecOps Engineer position at Amartha, candidates should have over five years of related experience, familiarization with cloud security concepts, and proficiency in scripting with languages like Python and Bash. Relevant certifications and experience with DevSecOps toolkits are highly preferred.

The Senior DevSecOps Engineer at Amartha will work with a variety of tools including Ansible, Jenkins, Terraform, Git, Nessus, and Pentesting tools such as BurpSuite and Metasploit. Familiarity with the ELK stack is also important for this role to effectively manage and monitor cloud environments.

Amartha is dedicated to fostering an inclusive environment that celebrates diversity. We believe that varied perspectives drive innovation, and actively encourage individuals from all backgrounds to apply for the Senior DevSecOps Engineer position, ensuring everyone feels respected and empowered.

Amartha is committed to the continual professional development of its employees. As a Senior DevSecOps Engineer, you will have access to advanced training, workshops, and tech talks, enabling you to stay ahead in the ever-evolving field of security and technological innovations.

In your response, emphasize specific projects where you've utilized AWS or GCP to implement security solutions. Highlight the challenges you faced and the tools you used to address vulnerabilities within these platforms.

Describe a structured methodology you follow for vulnerability assessments, how you identify potential threats, and the tools you utilize. Provide examples of how your assessments have led to actionable security improvements.

Share instances where you've automated security tasks, such as monitoring or incident response. Discuss the benefits of automation in reducing response time and increasing the overall security posture of an organization.

List the scripting languages you are adept in, like Python or Bash, and provide examples of scripting tasks you’ve completed that strengthened security, such as automation of audits or streamlining security protocols.

Mention your sources for security news, such as blogs, forums, or security conferences. Talk about any communities you're a part of, and the ways you incorporate new knowledge into your security strategies.

In your answer, narrate a specific incident where you played a role in managing a security breach. Detail your immediate actions, team communication, and the outcomes of your involvement, highlighting lessons learned.

Provide examples of vulnerabilities you’ve seen frequently, such as SQL injection or cross-site scripting. Discuss how you've addressed these issues in past roles with concrete steps taken.

Talk about your methods for promoting security awareness among your peers, including training sessions, workshops, or documentation. Share how you have used positive reinforcement to encourage best practices.

List your preferred tools for penetration testing, such as BurpSuite or Metasploit, and explain why you find them effective based on your experiences in identifying and mitigating security vulnerabilities.

In your answer, convey your enthusiasm for Amartha’s commitment to security and diversity, referencing specific values or projects of the company that resonate with you and how you believe you can contribute to their mission.