Senior DevSecOps Analyst

Job not on LinkedIn

🔥 5 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Addvisor Group

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2004

☁️ SaaS

📋 Compliance

🏢 Enterprise

SaaS • Compliance • Enterprise

Addvisor Group is a Brazilian enterprise software and consulting company that provides fiscal and business-process automation solutions for medium and large companies. Its flagship product, AddTax (and SmartDocx), is a SaaS platform that automates capture, orchestration and compliance of fiscal documents (NF-e, NFS-e, CT-e, MDF-e, etc. ), integrates natively with SAP (ECC and S/4HANA) and via APIs with other ERPs, and supports tax compliance across thousands of Brazilian municipalities and multiple countries. Addvisor also offers implementation and consulting services, including ERP selection and SAP implementations, focused on reducing operational costs, fines and improving financial and tax efficiency.

📋 Description

• Implement security practices in software development (DevSecOps); • Automate security checks in CI/CD pipelines; • Monitor and mitigate vulnerabilities in applications and infrastructure; • Perform static and dynamic code analysis to identify security flaws; • Implement and configure security tools for applications and infrastructure; • Collaborate with development, infrastructure, and security teams; • Define and maintain security and compliance policies; • Promote security training and awareness for technology teams; • Respond to security incidents and propose corrective measures; • Participate in agile ceremonies (daily meetings, planning, review, and retrospective).

🎯 Requirements

• Solid experience with DevSecOps practices; • Knowledge of security tools such as SonarQube, Checkmarx, Snyk, OWASP ZAP, etc.; • Experience with CI/CD pipelines (Jenkins, GitLab CI, Azure DevOps, etc.); • Knowledge of containers and orchestration (Docker, Kubernetes); • Experience with API and web application security; • Knowledge of Infrastructure as Code (Terraform, Ansible); • Familiarity with agile methodologies (Scrum, Kanban); • Experience with security monitoring and incident response; • Good communication and teamwork skills.