Senior DevSecOps Engineer

Details

Digital bank robbers are getting smarter and smarter. Can you keep our data behind bars? The need for information security is growing in a fast pace, especially within the banking sector, where there is much to be gained for cyber attackers. For this reason we are constantly looking for smarter ways to make banking as safe as possible for our clients. This is a key capability because there is a lot at stake.

As a DevOps Security Wizard, you’ll be part of a team who act as trusted advisors and coaches. Together, we’re transforming the way we approach security—shifting left to embed security into every stage of the DevOps process. If you’re passionate about making a real difference and thrive in a fast-paced, ever-changing environment, this is the role for you.

Responsibilities

• Collaborate closely with development teams, product owners and stakeholders to build secure banking products from the ground up.
• Act as a trusted advisor and coach to development teams and other stakeholders on embedding security into the DevOps lifecycle (secure by design).
• Scale business and customer interests against possible risks and provide creative, pragmatic alternatives when information security is at stake.
• Work across a wide range of technologies and tooling in an international IT organisation.
• Contribute to security processes, assessments, requirements management and documentation to ensure secure development and deployment.

Requirements

You must have the following requirements:

• Willingness to learn, IT background, security mindset
• 5-10 years of experience in IT/Security/Risk Management
• Education in information science, IT or relevant studies
• Experience in at least one out of the following three: DevOps Security or Threat modelling or Security Governance
• Fluent in English

It would be really nice if you have knowledge and understanding of:

• Development life cycle and platform security knowledge, development pipeline security, Threat modeling, Container security, AI security and secure coding
• Migrating workloads from classic datacentres to the cloud
• Cloud security with a particular focus on Azure and SAAS-solutions
• Security risks or solid understanding of CSA (Cloud Security Alliance) framework implementation
• Cloud concepts and best practices
• Security assessment and requirements management in a DevOps way of working
• Security processes, technologies and architectures such as security configurations, patch management, access control, cryptography, security monitoring, vulnerability management, Identity and Access management
• Information Security Risk Management and documentation, (MI) reporting, compliancy, policies and standards frameworks and consulting
• Fluent in Dutch

Soft skills mentioned:

• Stakeholder management skills, especially in a multi-cultural and international environment
• Strong communication skills both verbally and in writing

Working environment

You will become part of CISO Technology and Engineering (T&E), which is part of Corporate Information Security Office (CISO). The CISO department consists of approx. 500 employees and works on the information security of the entire bank. T&E is a multinational team with over 90 employees. We focus on IT security and people security, and work with our IT-colleagues to ensure appropriate infrastructure and application security.

Working at ABN AMRO means getting even better in what you do. We understand customers, translate their ambitions into common success and earn trust. Trust is gained by communicating clearly and ensuring secure banking for employees and customers. Banking is our profession; the digital world is our challenge.

Benefits

• Salary: € 5.847 - € 8.353 per month (see annual conversion in salary fields)
• Excellent employment conditions and an attractive package of employee benefits
• In charge of personal development, many training and career opportunities
• Office in Amstelveen as home base; presence also at the Zuidas; hybrid working with part of the week from home as the norm

How to apply / Contact

Respond to this online vacancy if interested. Also, if you do not tick all the boxes, but you are convinced that you are the perfect match, please contact: [email protected]

Additional information

• Team: CISO Technology & Engineering (T&E)
• Department: Corporate Information Security Office (CISO)
• Location: Amstelveen (home base) and presence also at the Zuidas (Amsterdam)
• Employment type: Professional
• Working hours: 36-40 hours per week