DevOps Security Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by ExploreLearning, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevOps Security Engineer at ExploreLearning will be pivotal in integrating security practices within the DevOps processes. This role entails a combination of software development and IT operations, with a focus on enhancing the security of applications and systems throughout their lifecycle. The ideal candidate will collaborate closely with development and operational teams to ensure that security is embedded into the continuous integration/continuous deployment (CI/CD) pipeline, establish relevant security policies, and conduct regular assessments to identify vulnerabilities that could pose a risk to the organizational infrastructure.

Job Responsibilities

• Design, implement, and maintain security measures for cloud and on-premises environments.
• Conduct threat modeling and risk assessments to identify potential vulnerabilities in systems and applications.
• Integrate security tools and practices into CI/CD pipelines to automate security processes.
• Collaborate with development teams to define secure coding practices and perform code reviews.
• Develop and enforce security policies, procedures, and best practices across the organization.
• Monitor systems for security breaches and respond to incidents in a timely manner.
• Stay updated with the latest security trends, threats, and technology solutions.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 3+ years of experience in DevOps, software development, or IT security role.
• Strong understanding of cloud security principles and experience with AWS, Azure, or GCP.
• Proficiency in using CI/CD tools such as Jenkins, GitLab CI, or similar.
• Experience with security assessment tools such as SAST, DAST, and vulnerability scanners.
• Familiarity with scripting languages such as Python, Bash, or PowerShell.
• Relevant security certifications (e.g., CISSP, CISM, AWS Certified Security) are highly desirable.

Technologies & Tools

The DevOps Security Engineer will utilize a diverse range of technologies and tools including, but not limited to, cloud platforms such as AWS and Azure, CI/CD tools like Jenkins and GitLab CI, and security tools like Qualys or Rapid7 for vulnerability scanning. Knowledge of containerization technologies (e.g., Docker, Kubernetes) and infrastructure as code (e.g., Terraform, Ansible) will also be beneficial in ensuring robust security practices.

Ideal Candidates

Ideal candidates for the DevOps Security Engineer position will possess a strong analytical mindset with a proactive approach to identifying and mitigating security risks. They should demonstrate excellent communication skills to collaborate effectively with multidisciplinary teams and convey complex security concepts clearly to non-technical stakeholders. A passion for continuous improvement in security practices and a commitment to maintaining high standards in system integrity are essential traits for success in this role.