DevSecOps Security Engineer or Engineer

You intervene transversely within the QUAD team of the Applications Service, in support of teams developing patient, HR, financial, and logistics applications for HUG. The team defines and maintains common tools, rules, and best practices (security, architecture, quality, build, deployment) to homogenize and automate development at DTN-IA.

As a DevSecOps Security Engineer, you work efficiently with the RSSI, security managers, product managers, over 80 developers, system engineers, and subject matter experts. You advise and federate teams.

You contribute to setting up an application-level security architecture for microservices, web applications, and mobile apps, as well as securing existing solutions. You carry out the security strategy in line with HUG's Security Policy and technical architecture guidelines, from conception to production.

You participate in developing DevSecOps processes and tools ensuring a secure and autonomous application lifecycle, accompany teams on their projects, and pilot your own missions while supporting QUAD initiatives.

You perform risk analyses, propose protection measures, and optimized secure architectures. You contribute to defining, documenting, and disseminating best practices, implementing security-compliant tools, and monitoring technologies, vulnerabilities, and threats. You intervene during security incidents as well.

You maintain critical software components of QUAD and provide support on application-level security, IAM, DevSecOps tools, CI/CD, microservices, and cloud. You are a reference point for many DevSecOps tools and practices and actively participate in expert groups and innovation within the team.

Finally, you may be solicited for other missions according to needs, contributing to the team's flexibility in a dynamic environment.