LR063 Microservices Security Engineer III

Microservices Security Engineer III, under proper management, is actively involved in the design, engineering, testing, integrates API, automates, and implementation of security solutions in all aspects of software Information Security that makes use of microservices architecture. Acts as the all-in-one security personnel by designing, implementing, and testing strategies, and reports on any occurrences for future planning. Oversee and monitor the position of network security and enlightening other staff to elevate security awareness. Assist fellow employees with cybersecurity, software, hardware, or IT needs. Identify, recommend, and implement the best methods in securing microservices. Collaborate effectively with other engineers to provide supervision, support, and knowledge in the security of mobile and web applications. Have a solid security-focused stance and skills to implement it. Understands core IT security principles and best practices and able to assess risk profiles and areas that necessitate the most consideration and priority. Responsible for assessing and verifying the security of third-party dealers. Build security designs for new software solutions to help reduce or alleviate vulnerabilities. Takes part in most or all stages of the software development life cycle, improves software development pipeline security, and analyze and scrutinize security incidents and bug bounties information. May have a Bachelor degree in computer science, computer engineering, and any other related field. Performs vulnerability assessments, on-going web security testing/pentest, and code review. Technically adept and have a profound hands-on knowledge of security in web-based technologies, using a microservice architecture. Highly knowledgeable in handling weaknesses and vulnerabilities of cloud-based applications, explicitly in a containerized environment. Experienced in web and app service security, pen-testing web apps/services built in AWS. Has hands-on threat modeling experience using attack trees, identification applications, cloud threats, dependency scanning, and SAST to identify security issues. Has solid experience and background working with build & release automation tools and methods like Gitlab and Jenkins.