T&DS - Cloud Applications & DevOps Security Engineer

Reporting to the Head of Cyber and Data Protection, the Cloud Applications & DevOps Security Engineer will ensure that all aspects of Application build and run are secured and compliant with the security best practices. They will be responsible for ensuring that all the applications managed by T&DS are covered by security standards, and the compliance is monitored. In the same way, they will be responsible that the Forvis Mazars CASB is covered by security standards, and the compliance is monitored. They will have to develop and maintain the Application build and run, DevOps and CASB strategy and will be responsible for the security applications of Forvis Mazars related to Application, DevOps and CASB.

Key responsibilities

* Defining and managing the Forvis Mazars CASB project
* Defining and maintaining applications, DevOps and CASB security standards.
* Monitoring applications, DevOps and CASB security compliance
* Keeping stakeholder inform by building performance reports and maintaining KPI.
* Managing applications, DevOps and CASB at the global level (Defender for Cloud Apps, Defender for cloud, …).
* Managing applications, DevOps and CASB security projects.
* Writing and maintaining the applications build and run, DevOps and CASB security process and procedures for Forvis Mazars including the compliance of local countries
* Contributing to the T&DS certifications process
* Providing support level 3 to internal teams on topics related to applications, DevOps and CASB
* Investigating security incident at level 3
* Ensuring a security watch and staying up to date on the latest IT and cybersecurity developments
* Being backup on some other team products/projects
* Contributing to team life

Key Skills

* Bachelor’s degree in Computer Science, Information Technology, or a related field.
* A Master’s degree with a cybersecurity specialization is preferred.
* Minimum of 5 years of experience in IT with at least 2 years in cybersecurity or managing security
* Fluent in English and at least another language
* Technical Skills:
* Knowledge of CASB (visibility, compliance, data security, Threat protection, …)
* Knowledge of Web applications security (API, Identification, Authentication, Encryption, SSO, Token, …)
* Knowledge of secure coding tools (Checkmarx, Owasp zap, dependencies checker, …)
* Knowledge of DevOps (IAC, GITLAB, CI/CD pipeline…)
* Knowledge of DevSecOps (SAST, DAST, IAST …)
* Knowledge of cloud infrastructures (Azure, GCP, AWS, NAAS, PAAS, SAAS…)
* Knowledge of Virtualization (VM, Docker, VDI, …)
* Knowledge of security protocol and encryption (TLS, X509, ciphers, hashing, salting, …).
* Knowledge of the Cyber security frameworks (NIST, ISO 27K, CIS, CISA Scuba, OWASP, …).
* Management of Defender for cloud Apps and Defender for cloud.
* Ability to conduct Risk analysis (appreciated but not mandatory).
* PowerShell or other scripting language.

Other requirements

Business oriented

Ability to work in agile and collaborative mode

Ability to manage security by risks

Self-training

Excellent communication and ability to provide feedback

Ability to work in a team and to be a support for the team

Collaborate with peer team to become a force multiplier through engagement, education, training, automation, …

Adapt and adjusts delivery model with agility based on the needs of the business, customer, and evolving security trends

Candidates should be based in a region compatible with the EU time zones

About Technology & digital solutions

The Technology & digital solutions (T&DS) is leading Forvis Mazars digital transformation. We aim at providing Forvis Mazars professionals with a seamless digital experience allowing greater collaboration worldwide in a safe environment. As a result, they’ll be empowered to deliver more value to clients every day.

To reach these goals, T&DS transformation programme aims at consolidating the IT operations from a multi-local model spread across 100+ countries into a global model. This includes the infrastructure and the operating model needed to support the business, people and clients now and in the future.

The success of this change relies on the great expertise and relentless engagement of every member of the team. This is a great moment to join the Technology & digital solutions organisation and be part of the delivery of this major transformation over the coming years!