Devsecops Engineer/Cyber-Security Prod

Mercedes Benz Otomotiv Ticaret ve Hizmetler A.Ş.

Qualification

• Bachelor’s degree in Computer Science or equivalent years of relevant education
• Fluency in English is a must
• Have experience with Cyber Security products such as Ampeg Lighthouse, CrowdStrike or similar 
• Have experience with Containerized application security, development and  operations
• Development know-how
• CI/CD (Jenkins,.) know-how
• Cybersecurity know-how
• MITRE CVE & how to fix them
• Docker / Kubernetes
• Container-Registries
• Splunk
• ServiceNow
• Comfortable with agile methods (Scrum, Kanban, ScrumBan)
• GitHub Issues, documentation in markdown files

Job Description

• Cyber Security and Container Security (Devsecops) Product Management Specialist
• Leading the cyber security product such as stakeholder, time, cost and Quality-Management within area of responsibility.
• Coaching/Mentoring via defining priorities and target achievement
• Enhancing security by supporting the application developers with integrating the Container Security Service (CSS) in their CI/CD pipeline and guide them if they have questions related to container security service offering
• Via deep product know-how including surrounding systems, ensuring the know-how transfer between different parties. Having cross-functional responsibilities from different departments within Cyber Security , IT Operation and Rollout teams
• Analyze of product results and proactively increase usage/benefits of the products for the whole organization
• Administration of cyber security product including interface setup, change management and database connections
• Supplier coordination about technical issues
• Build technical training documentation for IT users
• Incident & Problem management (including establishment of a stable monitoring)
• Capacity Management
• Resolve issues proactively to deliver high quality products based on customers’ needs
• Test management and coordination for new releases
• Maintain documentation of all systems and changes
• Regular reporting of usage and security improvements