Devsecops Consultant

Address:

Opportunity:

BMO has created a DevSecOps team to onboard development teams to assist with transformation and incorporation of cybersecurity in their DevOps practices. The team's mandate is to enable secure application development, helping connect security requirements and DevSecOps practices to the services supported by the Cybersecurity team. To accommodate expansion of this program we are expanding this team, the focus will be on the following activities:

The Work Itself:

• Contribute to the development of the Pipeline Security Standard
• Collaborate with Development teams to identify shift left opportunities
• Act as Liaison within Cybersecurity and work with tool owners to address concerns, streamline process and or assist with automation of manual processes
• Enhance existing CI/CD Processes leveraging secure pipeline criteria
• Culture transformation - work with business, technology, & development areas to ensure a security-first culture is embedded within BMO's DNA.

Job Roadmap:

• First 30 days will be spent onboarding, reviewing process and procedure, learning to navigate the org
• Days 30-90 Reviewing program materials, define your remit of responsibility, define schedule and begin onboarding teams
• Beyond 90 days will be focused on onboarding development teams, identifying opportunities, working with your team to determine trends and implementing change

Desired Skills:

• Knowledge of DevOps, DevSecOps and Security Architecture
• Applicant must be proficient in the use, creation and security of CI/CD pipelines, familiarity with IaC, CaC
• Familiarity with AWS, Azure, GitHub, GHAS, etc.
• Understanding of SAST/DAST/SCA/IAST and impact of integration to the pipeline
• Familiarity with Software Development and Application Development with a deep understanding of secure coding principles
• Understanding of Quality Control and Test Automation in Agile-based Continuous Integration environments
• A strong understanding of cybersecurity principles, with a desire to stay up-to-date with the latest threats and trends
• Translate business requirements and context into secure, sound and efficient solutions

Qualifications:

• Bachelor's degree in Computer Science, Cyber Security, or other relevant field of study preferred.
• 5+ years of experience with CI/CD and DevSecOps technologies and practices, Cybersecurity with a focus on secure application practices
• Familiarity with Application Security Architecture
• Experience working in Agile methodologies as Kanban/Scrum as part of a multi team organization

The above represents BMO Financial Group's pay range and type.

Salaries will vary based on factors such as location, skills, experience, education, and qualifications for the role, and may include a commission structure. Salaries for part-time roles will be pro-rated based on number of hours regularly worked. For commission roles, the salary listed above represents BMO Financial Group's expected target for the first year in this position.

BMO Financial Group's total compensation package will vary based on the pay type of the position and may include performance-based incentives, discretionary bonuses, as well as other perks and rewards. BMO also offers health insurance, tuition reimbursement, accident and life insurance, and retirement savings plans. To view more details of our benefits, please visit: https://jobs.bmo.com/global/en/Total-Rewards

We're here to help

At BMO we are driven by a shared Purpose: Boldly Grow the Good in business and life. It calls on us to create lasting, positive change for our customers, our communities and our people. By working together, innovating and pushing boundaries, we transform lives and businesses, and power economic growth around the world.

As a member of the BMO team you are valued, respected and heard, and you have more ways to grow and make an impact. We strive to help you make an impact from day one - for yourself and our customers. We'll support you with the tools and resources you need to reach new milestones, as you help our customers reach theirs. From in-depth training and coaching, to manager support and network-building opportunities, we'll help you gain valuable experience, and broaden your skillset.

To find out more visit us at https://jobs.bmo.com/ca/en.

BMO is committed to an inclusive, equitable and accessible workplace. By learning from each other's differences, we gain strength through our people and our perspectives. Accommodations are available on request for candidates taking part in all aspects of the selection process. To request accommodation, please contact your recruiter.

Note to Recruiters: BMO does not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to BMO, directly or indirectly, will be considered BMO property. BMO will not pay a fee for any placement resulting from the receipt of an unsolicited resume. A recruiting agency must first have a valid, written and fully executed agency agreement contract for service to submit resumes.