Sapper Security Engineer DevSecOps

What you will do
  You will lead the way.  As a Security Engineer DevSecOps you will be part of a security team and you will be responsible for integrating security practices into our DevOps workflows, ensuring that security is an integral part of the development process. You will work closely with development and SRE teams to automate and enhance security across our CI/CD pipelines. Your expertise will help us deliver secure, high-quality software at speed. Your role is crucial in enabling proactive defense strategies and ensuring that Sapper stays ahead of emerging threats.

• Design, implement, and manage security controls within continuous integration and continuous deployment (CI/CD) pipelines to ensure that security is automated and continuous.
• Develop and enforce security best practices for Infrastructure as Code (IaC) tools such as Terraform, GCP Cloud Deployment Manager.
• Collaborate with the DevOps teams to integrate secure coding practices and automate security testing, vulnerability scanning, and compliance checks within the DevOps pipeline using tools like SAST, DAST, SCA, and container security scanners.
• Collaborate with the SRE teams to implement monitoring and logging solutions to detect and respond to security incidents in real-time, ensuring swift remediation.
• Provide guidance and training to development and operations teams on security best practices, secure coding, and the use of security tools.
• Participate in threat modeling exercises to identify and mitigate risks during the design and development phases.
• Continuously assess and improve DevSecOps practices to ensure they remain aligned with industry standards and emerging threats.

What you bring

• Proven experience with CI/CD tools such as GitHub, Jenkins or similar.
• Experience securing cloud environments GCP, AWS or Azure
• Strong understanding of DevOps principles and the ability to integrate security practices into DevOps workflows.
• Proficiency in automation  and experience with security tools such as SAST, DAST, SCA, and container security (e.g., GCP Artifact Registry, Twistlock, etc.).
• Familiarity with containerization technologies like Docker and Kubernetes..
• Strong leadership and communication skills, with the ability to inspire and guide DevOps teams effectively.
• Analytical mindset with problem-solving capabilities in the context of cybersecurity challenges.
• Be collaborative and curious, able to work with all levels of staff with outstanding relationship building and influencing skills.
• Strong ability to lead and execute on the strategy to scale the security and privacy work across the organization, and not just execute on the deliverables.
• Passion for lean thinking approaches, automation, and continuous everything with a focus on scalability of software deliverables and of teams/people.

 
What we offer  

• Flexible hybrid work environment. A hybrid workspace enables us to get the best out of both worlds – in person team building opportunities at our modern and flexible offices, as well as the ability to work from home in a setup tailored to your needs. We do foresee favoring a balance of more in-person team time over remote work as we build our organization and teams and get to know each other as teammates, a 3/2 model.
• Wellbeing support. Access healthcare benefits, mental health resources, and wellness programs, ensuring your holistic wellbeing.
• Continuous learning. Invest in your growth with opportunities for skill enhancement, including workshops, conferences, and certifications.
• Team unity. Build lasting connections through team-building events, collaborative projects, and shared victories.

Why join Ericsson?

At Ericsson, you´ll have an outstanding opportunity. The chance to use your skills and imagination to push the boundaries of what´s possible. To build solutions never seen before to some of the world’s toughest problems. You´ll be challenged, but you won’t be alone. You´ll be joining a team of diverse innovators, all driven to go beyond the status quo to craft what comes next.
 
What happens once you apply?

Click Here to find all you need to know about what our typical hiring process looks like.

Encouraging a diverse and inclusive organization is core to our values at Ericsson, that's why we champion it in everything we do. We truly believe that by collaborating with people with different experiences we drive innovation, which is essential for our future growth. We encourage people from all backgrounds to apply and realize their full potential as part of our Ericsson team. Ericsson is proud to be an Equal Opportunity and Affirmative Action employer, learn more.

Primary country and city: Sweden, USA or Canada

Req ID: 753811