DevSecOps Security Specialist
工作地 八打灵再也, 雪蘭莪 发布日期 March 24, 2025 职位 ID 18882Our Opening and Your Responsibilities
We seek a hands-on DevSecOps Security Specialist to integrate and maintain our application security tools across multiple product teams. You will work closely with our DevSecOps Security Architect in Cybersecurity, supporting CI/CD pipeline integrations, security scanning operations, vulnerability triage, and secure coding initiatives. The ideal candidate brings security expertise, DevSecOps know-how, and strong collaboration skills.
Responsibilities:
- DevSecOps Integration: Collaborate with software development and product teams to embed security within our DevOps processes, ensuring the secure deployment of applications and infrastructure.
- Secure Solutions Design: Architect scalable security solutions that align with DevSecOps principles and industry standards/regulations.
- Policy & Compliance: Develop and maintain security policies, standards, and procedures; ensure compliance with relevant regulatory requirements (e.g., OWASP Top 10, CWE Top 25, SANS 25).
- Maturity Assessment: Conduct DevOps/DevSecOps maturity assessments to gauge and improve processes within development teams.
- Security Testing & Tooling: Implement and manage security testing tools (e.g., SAST, SCA, DAST, & IAST platforms), including vulnerability scanning, code analysis, and penetration testing.
- Collaboration: Work cross-functionally to integrate security measures throughout the software development lifecycle.
- Risk Awareness: Stay current on emerging threats, trends, and security technologies; communicate risks and issues to senior management.
- Thought Leadership: Serve as a subject matter expert and advocate for secure coding and application security best practices.
- Technical Support: Automate security checks in Azure DevOps/Jenkins/GitHub Actions; help developer teams understand and fix vulnerabilities.
What You Need to Succeed
- Education: Bachelor’s degree in Computer Science, Information Systems, or a related field.
- Experience: 5+ years in software development and application security architecture/development.
- Strong understanding of DevOps tools and processes, network security, cryptography, application security, and cloud security.
- Solid background in web application architecture, design, and development (including embedded systems is a plus).
- Familiarity with industry compliance frameworks (e.g., GDPR, OWASP Top 10, CWE Top 25, SANS 25, ISO27001, IEC62443).
- Practical experience with Git, Azure DevOps, Visual Studio/VS Code, Eclipse, or similar.
- Experience with Coverity(SAST), BlackDuck SCA, BlackDuck Binary Analysis (BDBA), and CodeDX (SRM) is a plus.
Skills:
- Excellent analytical and problem-solving abilities.
- Strong communication and interpersonal skills for effective collaboration with internal stakeholders and external vendors.
- Industry certifications (e.g., CISSP, CISM, CSSLP, CEH) are a plus.
Our Offer to You
- Competitive salary and comprehensive benefits package.
- Opportunities for professional growth and development in a global enterprise environment.
About Mettler Toledo
METTLER TOLEDO is a global leader in precision instruments and services. We are renowned for innovation and quality across laboratory, process analytics, industrial, product inspection, and retailing applications. Our sales and service network is one of the most extensive in the industry. Our products are sold in more than 140 countries, and we have a direct presence in approximately 40 countries. For more information, please visit www.mt.com.
Equal Opportunity Employment
We promote equal opportunity worldwide and value diversity in our teams in terms of business background, area of expertise, gender and ethnicity. For more information on our commitment to Sustainability, Diversity and Equal Opportunity please visit us here.
更多关于METTLER TOLEDO。
欢迎观看METTLER TOLEDO员工日常的一天，无论您在哪里，都能感受到团队的氛围。METTLER TOLEDO可能就是您心之所向的地方
-
- Cloud Security Engineer IT & Enterprise Reporting 八打灵再也, 马来西亚 02/07/2025
- Business Analyst - Workday HCM IT & Enterprise Reporting 八打灵再也, 马来西亚 01/13/2025
- Technical Writer IT & Enterprise Reporting, Management, Administration & Other, R&D / Engineering 八打灵再也, 马来西亚 01/03/2025
- Senior Technical Writer (Manager) IT & Enterprise Reporting, Management, Administration & Other, R&D / Engineering 八打灵再也, 马来西亚 11/25/2024
- IT Vendor Contract Specialist IT & Enterprise Reporting 八打灵再也, 马来西亚 08/27/2024
-
关注我们:
我们是一家提供平等机会和注重多元化的公司，不论种族、肤色、宗教、性别、年龄、国籍、残疾、性取向、性别认同、遗传信息、受保护的退伍军人身份或其他任何受保护的分类。了解作为应聘者根据法律所享有的平等就业机会权利。
METTLER TOLEDO官网www.mt.com，所有用户均可访问。如果您无法访问或需要协助申请，Contact Us EEO@mt.com.