SecDevOps Engineer

As a SecDevOps Engineer, you will play a critical role in integrating security practices into our team processes for decentralized applications, blockchain networks, and SaaS services. You’ll be working shoulder-to-shoulder with a team of esteemed cryptographers and engineers, and play a pivotal role in ensuring the sustained excellence of Zama’s cryptographic solutions.

Key Responsibilities

• Security Integration
  • Implement security best practices for blockchain networks, smart contracts, key management systems and web applications.
  • Conduct security assessments, vulnerability scans, and penetration testing for all components.
  • Integrate security tools and processes into CI/CD pipelines to ensure continuous security validation.
• Monitoring & Incident Response
  • Set up and manage monitoring and alerting systems for Blockchain Network and Web App security issues.
  • Develop security-related incident response strategies and participate in on-call rotations to ensure the security and uptime of our infrastructure.
• Collaboration & Documentation
  • Collaborate with development and security teams to identify and mitigate security risks.
  • Document security practices, incident response procedures, and infrastructure configurations.
• Compliance & Governance
  • Ensure that all deployments comply with industry regulations and security standards.
  • Participate in audits and security reviews, and implement recommendations for compliance.

Requirements

• Education and Experience
  • Bachelor’s degree in computer science, information security, or related field.
  • 3 years of proven experience in DevOps and security.
• Security Expertise
  • Experience integrating security best practices into multiple stages of the Software Development Lifecycle.
  • Experience with security tools such as Metasploit, Burp Suite, and OWASP ZAP.
  • Understanding of security standards and frameworks such as ISO 27001, NIST, and GDPR.
• Soft Skills
  • Excellent communication and collaboration abilities.
  • Ability to work in a fast-paced, innovative environment.
• Preferred Qualifications
  • Certifications in DevOps, Security, or Blockchain (e.g., Certified Kubernetes Administrator (CKA), Certified Information Systems Security Professional (CISSP), Certified Blockchain Professional (CBP)).
  • Strong experience with cloud platforms such as AWS, GCP, Azure and IaC tools such as Terraform and Ansible.
  • Knowledge of security best practices in blockchain, including key management, cryptographic algorithms, and consensus mechanisms.
  • Experience with DeFi, DEXs, and other emerging Web3 technologies.
  • Contributions to open-source blockchain or security projects.