T&DS - Cloud Applications & DevOps Security Engineer

T&DS - Cloud Applications & DevOps Security Engineer *** Hybrid work - 50% presense at the office is required *** Reporting to the Head of Cyber and Data Protection, the Cloud Applications & DevOps Security Engineer will ensure that all aspects of Application build and run are secured and compliant with the security best practices. They will be responsible for ensuring that all the applications managed by T&DS are covered by security standards, and the compliance is monitored. In the same way, they will be responsible that the Forvis Mazars CASB is covered by security standards, and the compliance is monitored. They will have to develop and maintain the Application build and run, DevOps and CASB strategy and will be responsible for the security applications of Forvis Mazars related to Application, DevOps and CASB. Key responsibilities Defining and managing the Forvis Mazars CASB project Defining and maintaining applications, DevOps and CASB security standards. Monitoring applications, DevOps and CASB security compliance Keeping stakeholder inform by building performance reports and maintaining KPI. Managing applications, DevOps and CASB at the global level (Defender for Cloud Apps, Defender for cloud, …). Managing applications, DevOps and CASB security projects. Writing and maintaining the applications build and run, DevOps and CASB security process and procedures for Forvis Mazars including the compliance of local countries Contributing to the T&DS certifications process Providing support level 3 to internal teams on topics related to applications, DevOps and CASB Investigating security incident at level 3 Ensuring a security watch and staying up to date on the latest IT and cybersecurity developments Being backup on some other team products/projects Contributing to team life Key Skills Bachelor’s degree in Computer Science, Information Technology, or a related field. A Master’s degree with a cybersecurity specialization is preferred. Minimum of 5 years of experience in IT with at least 2 years in cybersecurity or managing security Fluent in English and at least another language Knowledge of CASB (visibility, compliance, data security, Threat protection, …) Knowledge of Web applications security (API, Identification, Authentication, Encryption, SSO, Token, …) Knowledge of secure coding tools (Checkmarx, Owasp zap, dependencies checker, …) Knowledge of DevOps (IAC, GITLAB, CI/CD pipeline…) Knowledge of DevSecOps (SAST, DAST, IAST …) Knowledge of cloud infrastructures (Azure, GCP, AWS, NAAS, PAAS, SAAS…) Knowledge of Virtualization (VM, Docker, VDI, …) Knowledge of security protocol and encryption (TLS, X509, ciphers, hashing, salting, …). Knowledge of the Cyber security frameworks (NIST, ISO 27K, CIS, CISA Scuba, OWASP, …). Management of Defender for cloud Apps and Defender for cloud. Ability to conduct Risk analysis (appreciated but not mandatory). PowerShell or other scripting language. Other requirements Business oriented Ability to work in agile and collaborative mode Ability to manage security by risks Self-training Excellent communication and ability to provide feedback Ability to work in a team and to be a support for the team Collaborate with peer team to become a force multiplier through engagement, education, training, automation, … Adapt and adjusts delivery model with agility based on the needs of the business, customer, and evolving security trends. About Technology & digital solutions The Technology & digital solutions (T&DS) is leading Forvis Mazars digital transformation. We aim at providing Forvis Mazars professionals with a seamless digital experience allowing greater collaboration worldwide in a safe environment. As a result, they’ll be empowered to deliver more value to clients every day. To reach these goals, T&DS transformation programme aims at consolidating the IT operations from a multi-local model spread across 100+ countries into a global model. This includes the infrastructure and the operating model needed to support the business, people and clients now and in the future. The success of this change relies on the great expertise and relentless engagement of every member of the team. This is a great moment to join the Technology & digital solutions organisation and be part of the delivery of this major transformation over the coming years Seniority level Mid-Senior level Employment type Full-time Job function Information Technology Industries Accounting #J-18808-Ljbffr