DevSecOps Specialist

Description

#### **Who We Are** We are Solar Coca\-Cola, the second largest Coca\-Cola System bottler in Brazil and one of the world's top 13. A team of passionate people who deliver joy across 70% of Brazil’s territory — always full of energy, smiles, simplicity, and leadership. If working toward a greater purpose, overcoming challenges that serve as real opportunities to learn, grow, and develop is what drives you, this opportunity may be your chance to begin an inspiring journey with us. If you identify with who we are ***\#VemSerSolar \#PaixãoQueTransforma \#SedeQueImpulsiona*** **Responsibilities and Duties** #### **Your Day\-to\-Day Will Include:** * Integrating security tools into CI/CD pipelines (SAST, DAST, SCA, secrets detection), ensuring automated checks for every delivery. * Implementing and maintaining container image and registry scanning using tools such as Trivy, Clair, or Quay Security Scanner. * Supporting the configuration and operation of security policies in OpenShift/Kubernetes clusters, including Security Context Constraints (SCCs), Network Policies, and RBAC. * Using static analysis and software composition analysis tools — such as SonarQube, Semgrep, OWASP Dependency\-Check, or Grype — to detect vulnerabilities in source code and dependencies. * Managing secrets and exposed credential detection using tools like GitLeaks, TruffleHog, or detect\-secrets. * Contributing to infrastructure\-as\-code (IaC) automation with a security focus, using Terraform, Ansible, and validations via Checkov or tfsec. * Supporting admission policy implementation in clusters using OPA/Gatekeeper or Kyverno to prevent non\-compliant deployments. * Collaborating on runtime security monitoring using Falco or ACS (Advanced Cluster Security / StackRox) in OpenShift environments. * Performing vulnerability triage and follow\-up, supporting development teams in prioritization and remediation. * Participating in code reviews with a focus on application and infrastructure security. * Contributing to documentation of security standards, runbooks, and guidance for teams. **Requirements and Qualifications** #### **What You Need:** * Bachelor’s degree in Computer Science, Information Systems, Computer Engineering, or related fields; * Proven experience in DevOps practices, CI/CD pipeline automation, and infrastructure\-as\-code; * Hands\-on experience with Linux, Git, Docker, and foundational knowledge of Kubernetes/OpenShift. Familiarity with application security (OWASP Top 10\). Experience with at least one scanning tool (e.g., SonarQube, Trivy, GitLeaks, or similar); * Certifications related to backend development and cloud computing technologies; * Intermediate English proficiency. #### **Nice\-to\-Have (Differentiators):** * Experience securing production OpenShift or Kubernetes environments; * Knowledge of OPA/Gatekeeper, Falco, ACS/StackRox, Checkov, or tfsec. Experience with at least one cloud provider (Azure, AWS, or GCP); * Cloud, DevOps, Kubernetes, or Security certifications are a plus (e.g., CKA, CKS, AZ\-400, CompTIA Security\+). **Working Hours:** **Additional Information** #### **See Some Other Benefits of Being Solar:** For your health and safety: * Health insurance plan with special conditions for you and your dependents; * Telemedicine services covering multiple specialties, including telepsychology; * Dental insurance plan; * Emotional Well\-Being Program; * Wellhub (fitness center network); * Life insurance. For your nutrition: * Food allowance; * Meal voucher or on\-site cafeteria For your mobility: * Transportation allowance or company\-provided shuttle service For your financial planning: * Profit Sharing Program; * Private Pension Plan And beyond: * A Corporate University packed with development opportunities; * Extended Maternity Leave up to 180 days and Paternity Leave up to 20 days — also applicable to adoptive parents and same\-sex couples; * Discounts on products from our portfolio; * A Christmas Kit at year\-end to share joy with loved ones. At Solar Coca\-Cola, passion is not just a feeling — it’s the driving force behind everything we do. Our journey is led by over 20,000 Solar team members, spread across 13 factories and 44 Distribution Centers, serving approximately 400,000 points of sale across a region representing 70% of Brazil. We believe success is built through dedication and teamwork — where everyone has the opportunity to lead and contribute to the company’s growth. We inspire each other with the energy and enthusiasm that drive us to give our best — every day, both inside and outside our red walls. Purpose, development, and performance underpin our value proposition to employees — making us increasingly Solar. Together, we are Solar Coca\-Cola: Passion that transforms. Thirst that propels. **\#VemSerSolar**