DevOps Engineer (Security)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Medley Consulting, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevOps Engineer (Security) at Medley Consulting will be responsible for implementing security measures across the software development lifecycle. This individual will work collaboratively to integrate security controls into the DevOps practices, ensuring that security is an integral part of the build and deployment processes. The role also involves assessing system vulnerabilities, managing incident response, conducting security audits, and providing training to teams on security best practices to safeguard our infrastructure and sensitive data.

Job Responsibilities

• Design and implement secure DevOps pipelines by integrating security tools into the CI/CD processes.
• Conduct regular security assessments and vulnerability scans on applications and infrastructure.
• Monitor cloud environments and on-premises systems to identify and respond to security incidents.
• Develop and enforce security policies, standards, and procedures related to DevOps practices.
• Collaborate with development, operations, and security teams to promote a culture of security awareness.
• Automate security testing and compliance checks within the development lifecycle.
• Investigate security breaches and provide guidance on remediation efforts.
• Stay current with emerging security threats, trends, and technologies.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Minimum of 3 years of experience in a DevOps role with a focus on security.
• Proficient in using cloud service providers such as AWS, Azure, or Google Cloud Platform.
• Strong experience with security frameworks and best practices (OWASP, NIST, etc.).
• Knowledge of container security and orchestration tools such as Docker and Kubernetes.
• Experience with CI/CD tools like Jenkins, GitLab CI, or CircleCI.
• Familiarity with scripting languages such as Python, Bash, or PowerShell.
• Relevant security certifications (such as CISSP, CISM, or CEH) are a plus.

Technologies & Tools

The DevOps Engineer (Security) will work with an array of modern technologies and tools including but not limited to AWS, Azure DevOps, Terraform, Jenkins, Docker, Kubernetes, and various security assessment tools such as Snyk, Qualys, and Burp Suite. Familiarity with programming and scripting languages like Python and Bash is essential to automate processes and enhance security protocols.

Ideal Candidates

Ideal candidates for the DevOps Engineer (Security) position will possess a curious and analytical mindset with a passion for cybersecurity. They will demonstrate strong problem-solving abilities, attention to detail, and the capacity to work under pressure in a fast-paced environment. Effective communication and collaboration skills are vital, as the role requires interaction with multi-disciplinary teams and providing mentorship on best security practices. A proactive approach to identifying potential risks and a commitment to continuous learning will set successful candidates apart.