Secure Software Development Expert (DevSecOps) Senior Associate

About the role

PwC is opening a new Technology & Innovation Centre in Cairo, offering services from packaged applications (SAP, Oracle) to cybersecurity, data analytics, custom development and cloud services (AWS, Azure, Google), and is looking for enthusiastic self-starters to help build it. This Senior Associate role works with a global mindset alongside teams in the UK, Germany and other Middle Eastern countries, supporting clients in developing secure software development solutions.

Key responsibilities

• Collaborate with cross-functional teams to integrate security into a DevOps/cloud-based development environment.
• Develop and implement processes that embed security throughout the software development lifecycle.
• Stay up to date with security technologies and trends and recommend appropriate solutions.
• Conduct security assessments and vulnerability testing to identify risks in software applications.
• Help develop and enforce security policies, standards and guidelines, and work with developers to follow secure coding practices.
• Support secure cloud-based infrastructure and deployment strategies, and facilitate adoption of secure development practices.
• Monitor and report on security metrics, risks and compliance issues to support DevSecOps governance.

Required profile

• At least 3 years of relevant work experience.
• University degree, preferably in Computer and Information Science, Business Informatics, Computer Engineering, Cyber Security, Information Technology or Management Information Systems.
• Certification in CSSLP or CASE.
• Excellent oral and written English; able to work in a fast-paced, unstructured environment and to multi-task.

Required skills

• SAST and DAST tools and techniques.
• DevOps tools such as Jenkins, GitHub, Docker and Kubernetes.
• OWASP principles and best practices.
• SAMM (Software Assurance Maturity Model).
• Threat modelling, vulnerability scanning, penetration testing and code review.
• Microservices and container-based architectures.