DevOps Information Security Engineer at CCBill - Information Technology jobs in Malta - June 2020

DevOps Information Security Engineer at CCBill

at

CCBill Any
JOB TYPE: Full Time JOB LEVEL: Experienced
CATEGORY:
Information Technology
CCBill in Malta is currently looking to recruit a DevOps Information Security Engineer to join their team on a full-time basis.

*jobsinmalta.com would like to reassure you that despite these very challenging times, CCBill is carrying out online interviews and the selected candidate will be set up to work remotely until the offices reopen. Should you have any questions relating to the role, please reach out to Cindy on 99449495. 

Job Role:
We are setting up a new DevOps team to work on a Cloud-Native initiative for phoenixNAP, a CCBill integration partner. The team will use the latest technologies, frameworks and approaches that merge development with operations to create the next generation platform for our customers that will allow them to run scalable applications in modern and dynamic environments including public, private and hybrid clouds. The DevOps Information Security Engineer is responsible for providing technical expertise related to infrastructure and software security design, implementation, and support of a new product set for the company. He/she will help contribute to automation-first DevOps teams to increase our efficiencies, ability to scale and reduce our time to market using automation and infrastructure as code (IaC). He/she will be responsible for researching and developing new tools and processes for overseeing internal and external vulnerability and penetration tests as well as maintaining positive security and compliance posture for our products. The ideal candidate will interact with traditional information security teams to ensure the company maintains standards across the software and infrastructure of various product lines.


Key Job Responsibilities:
  • Provide analytical and technical security recommendations to other team members, oversight boards, and clients. Identify requirements, based on needs or resulting from a security issue that puts the organization’s systems at risk;
  • Perform network penetration, web application testing, source code reviews, threat analysis, wireless network assessments, and social engineering assessments;
  • Meet with clients and management to help specify and negotiate application security requirements, review current policies and procedures for applicability, maintain system OS security patch levels, and ensure the safe transition of applications to production;
  • Develop technology to automate security monitoring;
  • Recommend effective security configurations and architecture to active members in technical workgroups;
  • Liaise with the Enterprise Architect, Network Engineering, and Enterprise Management Teams to effectively communicate and architect security solutions;
  • Develop documentation to support ongoing security systems operations, maintenance, and specific problem resolution;
  • Work and coordinate with traditional information security teams to share ideas with a goal of maintaining proper company-wide security standardization;
  • Provide risk analysis for product features and architecture decisions.


Key Skills:
  • 3+ years’ experience working with information security issues affecting financial service organizations and/or cloud-based application service providers;
  • Expertise in TCP/IP, web architectures and technologies such as HTML, JavaScript, XML, REST, PHP, and API Gateway;
  • Extensive experience in systems administration, security DevOps processes, system hardening, and patch management strategies;
  • Experience with system automation frameworks (Puppet, Terraform) and CICD pipeline (Jenkins, GitLab CI/CD);
  • Knowledge of cloud-native technologies, key management solutions, and networking strategies;
  • Specific security-related experience including data-at-rest encryption, certificate validation, IDS/IPS, firewalls, SIEM and log management, Syslog analysis, HTTP and TCP/IP analysis, and vulnerability assessments including cross-site scripting, SQL injection, cross-site request forgery, HTTP response splintering, the OWASP Top 10, and SANS Top 25;
  • Bachelor’s degree in information security, information assurance, computer science, management information systems, computer information systems, or a related discipline;
  • Possess at least one of the following professional designations (or one of similar stature):
    • Certified Information Systems Security Professional (CISSP).
    • Certified Information Security Manager (CISM).
    • Certified Information System Auditor (CISA).
    • Certified Information Security Manager (CISM).
    • Certified in the Governance of Enterprise Information Technology (CGEIT).
  • Excellent verbal and written communication skills in English.
  • Ability to communicate with and understand the needs of non-technical internal and external clients.

*This is an exciting opportunity to work with a highly innovative and creative team, in a great working environment using the latest technologies, methodologies and frameworks. A competitive salary and benefits package are on offer to the right candidate.


CCBill:
CCBill is a leading global payment processor and e-commerce provider. As one of the largest third-party payment processors, CCBill is much more than a payment processor. CCBill is an e-commerce platform that can provide expert support and empowerment to your expanding relationships. Whether it's through consistent on-time payouts, distinctive affiliate tools, or the comprehensive and proprietary set of account management options, CCBill understands the online business like few others and has been offering industry-leading solutions since 1998. Processing for more than a billion dollars in transactions each year, CCBill has reliable problem-solving techniques, phenomenal consumer support, and innovative solutions to support all markets. Specialties: Credit Card Processing, Payment Solutions, Subscriber Management, Global Billing, Affiliate Marketing, Automated Billing, Customer Service, Mobile Billing, Merchant Billing Processing, Fraud Protection, Credit Card Services, E-commerce, High-Risk Management, API, Payments-as-a-Service, Subscription Digital, Subscription Retail, and Billing Automation.

Kindly submit your application directly to us using the 'Apply for Vacancy' button.

This website uses cookies to improve your user experience. By using our website you consent to all cookies in accordance with our Cookie Policy.