Senior Devsecops Engineer

**What do we do?**

**Who are we?**

Having started in Germany in 1987, GFT Technologies has grown to become a trusted Software Engineering and Consulting specialist for the international financial industry, counting many of the world’s largest and best-known banks as our clients. We are an organization that empowers you to not only explore but also raise your potential and seek out opportunities that add value. At GFT, diversity, equality, and inclusion are at the core of who we are. Ensuring a diverse and inclusive working environment for all communities is one of the main pillars of our diversity strategy, based on our core values and culture. We have been certified for 2022/23 as a ‘Great Place to Work’ in the APAC region. So, if you want to have the opportunity to work with an outstanding and progressive organization, this position could be right for you.

**Role Summary**

We are seeking an experienced and passionate** Senior DevSecOps Engineer**for the Service Operations team as we continue to grow our Operations-as-a-Service for our prime client.

**Key Responsibilities**
- Conduct manual and automated secure source code reviews in platforms such as Kotlin, Node.js, Android, iOS, and Python.
- Perform penetration testing on APIs, GraphQLs, and web interfaces to uncover and mitigate risks.
- Review and secure mobile and web APIs (REST, SOAP), ensuring proper SSL/TLS implementation.
- Integrate security testing into CI/CD pipelines using tools such as GitHub Actions.
- Use SAST/SCA/DAST tools to identify and remediate vulnerabilities.
- Stay current with emerging threats, vulnerabilities, and security technologies, including AI-related security risks and defences.

**Required Qualifications**
- Hands-on experience in mobile, web, and API penetration testing using tools such as Burp Suite, MobSF, Frida, etc.
- Proficiency in at least one programming language (e.g., Java, Kotlin, JavaScript, Python) and scripting (e.g., Bash, PowerShell).
- Strong understanding of secure coding practices and code review methodologies.
- Experience with threat modelling frameworks (e.g., STRIDE, DREAD).
- Familiarity with Agile and DevOps environments.
- Experience with SAST/SCA/DAST tools and integrating them into CI/CD workflows.
- Solid grasp of API security and cryptographic protocols.
- Knowledge of OWASP standards and secure SDLC practices.

**Preferred Qualifications**
- Certifications such as OSCP, CSSLP, AWS/Azure Security Engineer Associate, or equivalent.
- Experience with container security and infrastructure-as-code scanning.

**About Us**:
We show commitment to our investors and stand for solid, long-term growth performance. Founded in Germany in 1987 and in American territory since 2008, GFT expanded globally to over 10,000 experts. And to more than 15 markets to ensure proximity to clients. With new opportunities from Asia to Brazil, the international growth story continues. We are committed to grow tech talents worldwide. Because our team’s strong consulting and development skills across legacy and pioneering technologies, like GreenCoding, underpin success. We maintain a family atmosphere in an inclusive work environment.

**Why Choose GFT?**:

- Competitive Compensation
- Benefits package including comprehensive medical, dental, vision and others
- Company Culture based on our Core Values
- Professional Development Training with Individual Development Plans to map out your career growth
- Opportunity to work in a global environment with diverse teams built with colleagues from around the world
- Opportunity to work with technology industry leaders in the financial services industry
- Opportunity to work for big name clients in capital markets, banking and other industries