Loading...

DevSecOps Engineer

Ahmedabad, GJ, IN, 380006 Abingdon, GB, OX14 3YP

Information Technology

Sophos Overview – Cybersecurity Evolved

Sophos evolves to meet every new challenge, protecting more than 400,000 organizations of all sizes in more than 150 countries from today’s most advanced cyberthreats. Powered by SophosLabs, our cloud-native and AI-enhanced solutions are able to adapt and evolve to secure endpoints and networks against never-before-seen cybercriminal tactics and techniques. Managed through our award-winning, cloud-based platform, Sophos Central, our best-of-breed products work together through our unique Synchronized Security system to share threat intelligence and respond to evolving threats. The Sophos suite of products secures networks and endpoints against automated and active-adversary breaches, ransomware, malware, exploits, data exfiltration, phishing, and more.

 

IT at Sophos delivers world-class IT applications, infrastructure, and services, enabling the delivery of the company vision and strategy. This department is led by a leadership team with extensive experience leading IT functions in the security industry, and our technical contributors are widely held as industry experts in their domain.  We consistently encourage innovation and agility to foster best in class solutions. As a member of this team, we are committed to investing in your professional development to ensure you have opportunities to advance in your career.

 

Main Duties

What we are looking for?

 

To succeed in this role, you’ll be passionate about Cyber security and software development, and keen to use your programming and scripting skills. Your innovative ideas and problem-solving talent to help the team build tools that help our Security Operations Team protect Sophos.

 

What you should expect?

 

You will typically be exposed to the full project lifecycle, contributing at all stages, building tools for the Security Team.

As part of this role you will need to:

  • Write code and scripts to support the Security Engineering and Operations Team along with test automation;
  • Work alongside security analysts to triage and monitor alerts and incidents to understand the workflow and SOC operational procedures.
  • Monitor system logs, SIEM tools and network traffic for unusual or suspicious activity
  • Develop procedures to automate security tasks during code builds and deployments
  • Participate in the design of Security automation solutions/tools in line with asset technical strategy, quality and functionality requirements;
  • Actively contribute to release planning and drive for high-value and high-quality solutions which meet business needs;
  • Participate in security reviews of new developments to ensure that released products comply with Sophos’ security requirements and industry best practice;
  • Manage a CI/CD pipeline
  • Other duties and responsibilities as directed.

Skills & Experience

Essential

  • Experience of developing code in python and powershell
  • Experience of working within AWS, GCP, Azure
  • Ability to use ML toolkits and AI to enhance the detections
  • Experience with Ansible/Chef/Puppet
  • Natural problem solver who enjoys being challenged
  • Able to work autonomously whilst working collaboratively within the wider team environment
  • Cloud automation tools – Terraform, Cloudformation
  • Experience with Restful APIs and version control (git)
  • Experience working with container technology including Docker and Kubernetes
  • Agile experience with Scrum/Kanban

Desirable

  • Understating and interest in Cyber Security
  • Contributed to an open source project
  • Knowledge of Splunk
  • Experience with automated regression testing
  • Proficiency with work tracking systems such as Jira and project management solutions

Equal Opportunities

Sophos is committed to equality opportunity in all areas of its work. All qualified applicants will be treated in a fair and equal manner and in accordance with the law regardless of gender, marital status, race, religion, colour, age, disability or sexual orientation.

 

If you choose to explore this opportunity, and subsequently share your CV or other personal details with Sophos, these details will be held by Sophos for 12 months in accordance with our Privacy Policy and used by our recruitment team to contact you regarding this or other relevant opportunities at Sophos.  If you would like Sophos to delete or update your details at any time, please follow the steps set out in the Privacy Policy describing your individual rights.  If you have any questions about Sophos’ data protection practices, please contact dataprotection@sophos.com.

At Sophos, we want every organization to be protected by innovative, next-generation IT security, even those who don't have a huge IT staff. We protect organizations of all sizes, all around the world by making enterprise-grade security that is simple to deploy, manage, and use. It is our passion, and something we are truly proud of.