2 Secure Devops Jobs

Role & responsibilities Job Title: Senior Lead Engineer - Product Cyber Security Years Of Experience: 8-12 Years Role Overview: The Security Sr Lead Engineer/Tech Specialist works with product development teams across all regions globally to ensure commitment to the cyber security strategy of minimizing flaws and improving product resiliency to cyber-attacks by ensuring adherence to the integrated secure development lifecycle process, which embodies a secure-by-design defense in depth philosophy. You will be a strong technical expert in matters related to pentesting and cyber controls and will report to a team manager responsible for product architecture review and testing. This role is part of the Product Cyber team (under the Global DT Cyber team) which focuses on continuously improving the cyber posture of products that are often installed in customer's environments. On a typical day you will: Perform DAST, SAST & Pentest for different products Perform Threat Modeling and Architecture reviews for new products and design changes with existing products Handle Product Cyber Incident Response activities and Active contribution to Risk Management Work with product development teams towards secure DevOps activities and CI/CD integration issues with Security tools Work with product development teams and carry out functional cyber risk assessments to support their cyber requirements throughout the entire development cycle. Coordinate with quality and product development teams to periodically update cyber security design policies and ensure that these policies are incorporated into product design, with requirements for traceability and system validation and verification. Interface with global teams and share best practices and lessons learned Refine and support the standard work associated with product cyber security incident response management Work closely with the product testing teams to validate recommended security controls Continually enhance the capabilities of the Cyber security team: Identification of technology and methodology gaps Participation and leading technical and industry committees Creation of discipline health score card. Work in an environment of continuous improvement and lean process and product development. good to have knowledge in Agile methodologies. Stay updated on latest cyber security hacking news, technologies and methodologies including: The latest attack methodologies include penetration testing and red-team methodologies. Latest forensic and incident response methodologies. Attend security or hacker conferences and stay on the cutting edge What You Will Need to be Successful: Bachelor of Science/Engineering in cyber security, computer science or a related engineering discipline 8+ years of product cyber security engineering and software systems development experience; at least 4 years hands-on experience with penetration testing methodologies and tools. In depth knowledge of IEC 62443 and related cybersecurity standards. In-depth knowledge of requirements captures, cyber security threat modeling and systematic discovery of threats, as part of Secure Development Lifecycle, with broad understanding of potential vulnerabilities at different layers of hierarchical systems Cyber security certifications such as OSCP, GSEC, CEH Knowledge of state-of-the-art security analysis tools and various product cyber security safeguards. These include threat modeling, source code analysis, dynamic analysis, penetration testing and audit/compliance tools Excellent written and verbal communication and presentation skills. Adept at communicating with globally disperse cross functional teams. (Preferred) Strong knowledge in various cryptographic systems and requirements for authentication, authorization and encryption for various types of systems (Preferred) Intimate knowledge and experience with incident response management and risk assessment Preferred candidate profile

We are looking for a highly skilled Developer with expertise in Java, Spring Boot 6, Spring Framework, Postgres SQL, SOAP and REST Web Services, and the MEAN stack (MongoDB, Express.js, Angular, Node.js) with good understanding of AWS services. The ideal candidate will have extensive experience in building scalable web applications and possess AI competencies in Generative AI, LLMs, NLP, Machine Learning (ML), Deep Learning (DL), Agentic AI, Autonomous Systems, and AI-Augmented Development. What is in it for you? Discover what's great about working at Marsh McLennan from the opportunities that our size brings, to our commitment to our communities and understanding the benefits youll receive. We are four businesses with one PURPOSE: helping companies meet the challenges of our time. As a global leader in insurance broking and risk management, we are devoted to finding diverse individuals who are committed to the success of our clients and our organisation. Joining us will provide a solid foundation for you to accelerate your career in the risk and insurance industry. You will join a team of talented professionals from across the globe which is dedicated to helping clients manage some of the world's most challenging and complex risks. We can promise you extraordinary challenges, extraordinary colleagues, and the opportunity to make a difference. Our rich history has created a client service culture that we believe is second to none. Our commitments to Diversity and Inclusion, Corporate Social Responsibility, and sustainability demonstrate our commitment to stand for what is right. As a Marsh McLennan colleague, you will also receive additional benefits such as: A competitive salary Employee friendly policies Health care and insurance for you and your dependants Healthy Work life balance A great working environment Flexible benefits packages to suit your needs and lifestyle Future career opportunities across a global organization Role & Responsibilities Participate in high- and low-level design activities Designing, developing and delivering end to end software solutions Ensure reusability, security, performance and standard industry coding practices and patterns Conduct code reviews Function as part of a highly collaborative team Flexibility for working in shifts to have required overlap with other geographic teams (US, UK, Australia, etc.) Must be able to work without supervision/direction; able to resolve technical hurdles independently Able to discover technical requirements comparing different application versions; able to propose efficient & quality solutions/recommendations Creating self-contained, reusable, and testable modules and components Work with our partners to understand business and technology problems or opportunities Provide process, guidance and governance on technology obsolescence, component re-use and platform modernization Design, document and communicate solution designs that accommodate the Agile Principles of fail fast and provide the resilience necessary to accommodate changing and fluid requirements Incorporate reuse, standardization and security-by-design into your solution designs to simplify, secure and accelerate technology delivery Leverage innovative design and expertise to influence MMCs technology roadmap, ensure architectural standards, participate in reviews, and support implementation from setup to delivery. Be an involved member in our technology community, championing the latest technologies and trends within MMC and the wider industry, sharing your knowledge, successes and learnings with your colleagues Bring a shift left mentality, ensuring that automation and efficiencies are enabled through the solution design Should have worked with Agile Methodologies Excellent analytical and effective communication skills Proactive in proposing new ideas and solutions What you need to have: At least 15+ years of experience on applications development using Java, Spring Boot 6, Spring Framework, Postgres SQL, SOAP Web Services, REST Web Services and MEAN stack Mandatory Skillset: Java Spring Boot 6 Spring Framework Postgres SQL SOAP Web Services REST Web Services MEAN stack and middleware technologies Multi Factor Authentication Single Sign On (OAuth, SAML) Containerization / Kubernetes Microservice based architecture Secure By Design concepts Secure DevOps Exposure to Big Data / Data Lake / BI Tools Application Performance Monitoring (APM) techniques Agile Recognized document standards (C4, UML, ArchiMate) Required AI Competency: Generative AI, LLMs, NLP, Machine Learning (ML) & Deep Learning (DL) Fundamentals Agentic AI & Autonomous Systems AI-Augmented Development What makes you stand out? AWS experience Micro services experience Snyk and GitGuardian Agile methodology Containerization / Kubernetes Microservice based architecture Secure By Design concepts Secure DevOps Exposure to Big Data / Data Lake / BI Tools Application Performance Monitoring (APM) techniques Recognized document standards (C4, UML, Archimate) Preferred candidate profile