Qualifications
Strong Python, bash, Linux shell or similar
Experience integrating with native AWS services (CodePipeline, CodeCommit, CodeBuild, CodeDeploy, EC2, EKS, ECR, S3)
Knowledge of networking, IAM, API and security assessment tools/methodologies.
Familiar with container and orchestration.
Familiar with IAM protocols such as SAML, SPML, XACML, SCIM, OpenID and OAuth.
Understanding of the cyber threat landscape and methodologies to protect technology assets.
AWS Certified Developer Associate or AWS Certified Solutions Architect Associate preferred.
Excellent verbal and written communication skills
Proficient in automation and deploying CI and CD tools and services (Jenkins Pipeline as Code, Git, Maven).
Hands-on experience building solutions with tools and services like AWS CloudFormation, Terraform, or custom build orchestration tools leveraging SDKs or directly interacting with APIs
Strong understanding of fundamental Application and Infrastructure Security concepts, including common types of attacks and exploitation techniques.
Solid Experience with various application security tools (Example-ZAP, BURP, Tenable, Check Mark, Semmel, fortify, Sonatype, Kali, WebInspect/AppScan, dependency check).
Solid understanding of common web and systems application vulnerabilities. Experience integrating security tools into the DevOps environment