Responsibilities:

• Security Best Practices: Develop and enforce security best practices and guidelines.
• Vulnerability Management: Identify and prioritize security vulnerabilities implement remediation strategies and track progress.
• Secure Development: Collaborate with developers on secure coding practices
• Continuous Improvement: Continuously evaluate and improve security tools and processes
• Tooling and Infrastructure: Manage security tools like CI/CD pipelines and vulnerability scanners.
• Incident Handling: Detect, analyze, and respond to security incidents.
• Policy Development: Develop and maintain security policies and procedures.
• Risk Assessment: Conduct regular security risk assessments and audits and provide recommendations for risk mitigation.
• Performance Metrics: Define and track key performance indicators (KPIs) related to security and report on the effectiveness of security measures.
• Threat Modeling: Conduct threat modeling exercises to identify potential threats and implement security controls with architects and developers.
• Incident Response Drills: Conduct regular incident response drills to test plans
• Infrastructure Management: Manage and optimize cloud and on-premises infrastructure for infrastructure scalability, reliability, and security
• Deployment Automation: Automate the deployment of applications and services for seamless and secure deployment processes.

Industry: IT-Software / Software Services
Time: 7:00 AM – 4:00 PM
Location: Kalopul, Kathmandu
Working Days: Monday-Friday

About Company:

Codavatar is an application (web/mobile) development firm that provides best-in-class solutions on the web, mobility, cloud, and more internet-based services. The candidate will be working for Dialaxy, a virtual phone system for sales and business communications.

Job Overview of DevOps:

We are seeking an experienced DevOps Engineer to join our dynamic team. This role offers an exciting opportunity to enhance the efficiency and reliability of our software delivery processes. As a DevOps Engineer, you will gain hands-on experience with cutting-edge technologies and play a vital role in our software development lifecycle.

Roles:

• Security Integration: Embed security practices into the DevOps process from the start.
• Collaboration: Work closely with development, operations, and security teams. and promote a culture of security awareness.
• Automation: Implement and manage automated security tools and processes for automated security testing, vulnerability scanning, and compliance checks.
• Monitoring and Incident Response: Monitor for security vulnerabilities and incidents by developing and implementing incident response plans.
• Compliance and Governance: Ensure compliance with industry standards and regulations and maintain documentation for audits.
• Infrastructure as Code (IaC): Manage infrastructure using IaC tools like Terraform and Ansible by ensuring secure and efficient deployment and scaling of infrastructure
• Continuous Integration and Continuous Deployment (CI/CD): Design, implement, and maintain CI/CD pipelines by ensuring pipelines are secure, efficient, and scalable.

• Education Qualification: Bachelor's degree in computer science, IT, or a related field, self-study, boot camps, or candidates that studied online courses are also encouraged to apply.
• Experience: 5+ years of experience in a related field.