DevSecOps - Fannie Mae Reston, VA, USA Bookmark Share Print 541 0 3

Listing Description

• Strong Python, bash, Linux shell or similar

• Experience integrating with native AWS services (CodePipeline, CodeCommit, CodeBuild, CodeDeploy, EC2, EKS, ECR, S3)

• Knowledge of networking, IAM, API and security assessment tools/methodologies.

• Familiar with container and orchestration.

• Familiar with IAM protocols such as SAML, SPML, XACML, SCIM, OpenID and OAuth.

• Understanding of the cyber threat landscape and methodologies to protect technology assets.

• AWS Certified Developer Associate or AWS Certified Solutions Architect Associate preferred.

• Excellent verbal and written communication skills

Proficient in automation and deploying CI and CD tools and services (Jenkins Pipeline as Code, Git, Maven).

Hands on experience building solutions with tools and services like AWS CloudFormation, Terraform, or custom build orchestration tools leveraging SDKs or directly interacting with APIs

Strong understanding of fundamental Application and Infrastructure Security concepts, including common types of attacks and exploitation techniques.

Solid Experience with various application security tools (Example—ZAP, BURP, Tenable,Check Mark, Semmel, fortify, Sonatype, Kali, WebInspect/AppScan, dependency check).

Solid understanding of common web and systems application vulnerabilities.Experience integrating security tools into the DevOps environment (such as Zap or Burp)

Familiarity with key security concepts/frameworks such as OWASP, CVE, and CVSS.