About the Job:
Presight is an ADX-listed public company, majority-owned by Abu Dhabi-based G42, recognized as a leading big data analytics company powered by GenAI. We specialize in all-source data interpretation to drive insight-driven decision-making, thereby supporting policy shaping and contributing to safer, healthier, and more sustainable societies. Our GenAI-driven products and solutions help both private and public sectors achieve their AI ambitions effectively.
We are seeking a detail-oriented DevSecOps Engineer adept in integrating security into CI/CD pipelines, automating security testing, and ensuring secure application deployments. This role requires collaboration with cross-functional teams and the use of advanced analytics tools.
Working at Presight Offers:
- Culture: An open, diverse, and inclusive environment encouraging personal growth and industry-first innovations.
- Career: Exceptional learning, development, and growth opportunities available through structured training programs and innovative, high-tech projects.
- Rewards: Competitive remuneration package, including healthcare, education support, leave benefits, and more.
Key Responsibilities:
- Embed security measures throughout the Software Development Lifecycle (SDLC).
- Integrate security into CI/CD pipelines.
- Configure and enhance security tools, including SAST, DAST, SCA, Image Scanning, IaC, etc.
- Automate security testing and monitoring.
- Ensure secure deployment of applications.
- Collaborate with development and operations teams to remediate vulnerabilities and implement security best practices.
- Conduct regular security assessments and compliance checks.
Key Performance Indicators (KPIs):
- High rate of automated security test coverage.
- Reduction in security vulnerabilities in deployed applications.
- Efficient and secure deployment processes.
Qualifications:
- Bachelor's degree in Computer Science, Information Technology, or a related field.
- 3-5 years of experience in DevOps with a focus on security.
Skills:
- Integrating security practices into the SDLC.
- Knowledge of OWASP Top 10, CWE/SANS Top 25, DevSecOps best practices, and threat modeling.
- Automating security controls and vulnerability management.
- Proficient in working with Version Control Platforms (GitLab, GitHub, Azure DevOps), Jenkins, Docker, Kubernetes, Terraform, Ansible, Vault.
- Knowledge of cloud security principles and container security.
- Proficiency in Python, PowerShell, and Bash for security automation.
- Experience with security assessments, incident response, and compliance checks.
- Software development experience using Java and Python is desirable.
