Found Description
Job Description
1. Perform technical assessments of SDLC processes, including code deployment, version control, CI/CD pipelines, and automated testing.
2. Review and validate controls around source code management (e.g., Git), build automation (e.g., Jenkins, Azure DevOps), and release management.
3. Evaluate the use of infrastructure-as-code (IaC), containerization (e.g., Docker, Kubernetes), cloud-native development practices and recovery strategies.
4. Assess the effectiveness of security controls embedded in the SDLC, secrets management including Key Management and secure coding practices.
5. Collaborate with engineering, architecture, and DevOps teams to identify control gaps and recommend improvements.
6. Support assurance work by collecting and reviewing the evidence and preparing the working paper.