Security Consultant - CI/CD & Software Supply Chain Security, remote

Project overview

For our client project, I am currently looking for a Security Consultant (m/f/d) - CI/CD & Software Supply Chain Security (30721).

Is this a suitable project for you? I look forward to your feedback!

Responsibilities

For one of our clients in the public sector, we are currently looking for a "Security Consultant" to secure CI/CD processes and software supply chains in a security-critical environment with separate network and security zones.

The assignment will be full-time and approximately 95% remote.

• Analysis, evaluation, and hardening of existing build, CI/CD, and delivery processes across multiple security zones
• Design and setup of an artifact lock including mirroring, testing, quarantine, release, and controlled software procurement
• Securing the software supply chain through signing, proof of origin, SBOMs, and secrets management
• Introduction of automated security scans and Policy-as-Code approaches into existing development and delivery processes
• Implementation in the pilot area and creation of a rollout concept for further teams and zones

Requirements

For your application and further information, please use this link:

https://experts.contractor.de/projektangebot-details/30721/?so=-1&ts=20fe62633b503a7b7acc16556af86de1&cr=RFQFLM&utm_source=newsletter&utm_medium=RFQFLM&utm_campaign=30721

Further interesting projects can be found in our LinkedIn group: https://www.linkedin.com/groups/*/

Best regards

Marian Tilcher

Recruiter

Contractor Consulting GmbH

Adams-Lehmann-Str. 56

80797 Munich

https://www.contractor.de - we consult | we create | we recruit

Privacy Policy: https://www.contractor.de/datenschutz/

Managing Director: Alexander Ulrich | District Court Munich, HRB 187777 | Registered office: Munich

• Many years of experience with self-operated CI/CD platforms as well as build and deployment processes
• Profound expertise in Software Supply Chain Security, artifact management, signing, SBOMs, and secrets management
• Practical experience with security scanning, Policy as Code, and securing development and delivery chains
• Very good knowledge of relevant solutions such as GitLab CI, Jenkins, Harbor, Nexus, Vault, Cosign, Trivy, OPA/Gatekeeper, or comparable tools
• Experience in regulated or security-critical environments as well as in collaboration with development and platform teams
• Willingness to undergo a security check (SÜ2)
• | *@*.de

Project details

November

12 months

• Start: ab sofort
• Duration: 12 Monate
• Location: DE
• Languages: German