SECDEVOPS SENIOR CONSULTANT

NTT DATA is a team of more than 139,000 diverse professionals, operating in more than 50 countries throughout the world. The sectors where we have activities include: telecommunications, finance, industry, utilities, energy, public administration and health.Our mission? Offer technological solutions, business, strategy, development and maintenance of applications, while being a benchmark in consulting. All thanks to the collaboration between teams, the human quality of our people and the fact that we do not conform to what is established, we always seek innovation that brings us closer to the future. Our essence has led us to the forefront of technology, breaking paradigms and providing solutions that truly respond to the needs of each client. Our talent has led us to be one of the top 6 technology companies in the world. Because #Greattech, needs #GreatPeople, like you Tasks:Ensure proper security processes are followed and applied by the developers (provide guidance, standards, ensure best security practices are followed and perform the necessary assessments and controls). Provide the following support to the technical and development teams:Support on the testing of any executable code that could eventually be deployed (using IAST/SAST/DAST/SCA solution).Support on debugging and troubleshooting of build security issues and security remediation in general.Support on the definition of additional policies/filters (license management, operational management and how to stop builds / fail pipelines).Support on the adjustment of roles and responsibilities and integrations with other internal / external tools (Threatfix, Defect Dojo, etc.).Provide security advice in the whole SecDevOps lifecycle considering all components required per project.Conduct a full review of the codes and changes that operations engineers may make in the system’s configuration considering Infrastructure as code solutions like Terraform, Ansible, Chef, Puppet, Saltstack.Collaborate with internal teams and maintain Security tools updated / upgraded and well-configured.SecDevOps standards and procedures definition. Define Security automated tools standards and procedures for internal teams’ awareness.Binding and augmentation of product-specific security controls to organization corporate toolsHelp with automation of vulnerability management and security incident management process steps.Essential Experience:Good knowledge of information security principles.Secure development base knowledge.SSDLC definition / roll-out(s).Automated Testing solutions deployment (Fortify, AppScan, Synopsys, Veracode, Checkmarx, Synk, etc.).Base knowledge in Github, Gitlab and / or Azure DevOps as CI/CD environments.More than 5 years working in security, involved in the whole system lifecycle. Essential Skills: Analytical, organised, and efficient.Able to set priorities to meet objectives.Excellent team player with communication, facilitation and interpersonal skills.Linux - Unix Shells, PowerShellContainers - Kubernetes, Docker, Container ImagesAutomation - Integration. Deployment, Terraform, AnsibleUnderstanding of network security, host security, container security, IDS/IPS (Network & Host), EDR & CSPMAdditional skills:IAM/PAM (AD, Okta, CyberArk, HashiCorp), Backup/Restore and security controls.Cloud Security - CWPP (Microsoft Defender for Cloud, Lacework Cloud Security)APM (New Relic, Dynatrace, Datadog)Containers - Podman, Vulnerability scannersVulnerability management - CVE / CVSS, SAST / SCAIncident management - Splunk, Sentinel, SIEM integration, interfacing with SoCAutomation & Deployment - Terragrunt, Terraform.Remote access - MFA, VPN, Privileged Access ManagementNetwork security - Segmentation, Firewalls, IDS, IPSRestore, Disaster recovery. At NTT Data, we believe everyone is unique and different, this is why we bet for an inclusive culture that recognizes and values diversity. We work day after day to create an environment in wich we can explore, live and enhance our own singularity.#WeAreAllUnique #YouMakeUsUnique