About the Role
This is an exciting opportunity to join Deloitte Operations for an engagement with one of our clients. We're looking for an experienced DevSecOps / DevOps Engineer to support a major programme focused on strengthening security and vulnerability management across application deployment lifecycles. The role will involve implementing and optimising security scanning and controls within CI/CD pipelines, with a particular focus on JFrog Artifactory and application security tooling.
Responsibilities
•Implementing and optimising security scanning and controls within CI/CD pipelines
Requirements
•Strong hands-on DevOps / DevSecOps engineering experience
•Strong JFrog Artifactory experience, ideally including implementation/configuration rather than solely end-user experience
•Experience implementing vulnerability and security scanning within application deployment pipelines
•SonarQube / SonarQube Advanced Security experience
•Strong knowledge of CI/CD pipelines and embedding security controls throughout the software delivery lifecycle
•Experience with SBOM (Software Bill of Materials) generation
•Bitbucket experience, including branch protection and pull-request controls
•Understanding of container/image security and secure management of external binaries and images
This would suit an engineer with a strong DevOps background who has moved heavily into DevSecOps, application security and secure software delivery.
Nice to Have
•JFrog Xray / Artifactory Curation experience highly desirable
•Experience with Cosign / container image signing would be advantageous
Conditions
No conditions specified in the posting.
