DevOps Security Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by IDR, Inc., so some details may not match this job. The employer's own page has the real description.

Position Overview

As a DevOps Security Engineer at IDR, Inc., you will play a crucial role in integrating security practices into our DevOps processes. Your responsibilities will encompass analyzing security risks, implementing security measures within the software development lifecycle, and ensuring compliance with organizational and regulatory standards. Furthermore, you will collaborate with cross-functional teams to cultivate a culture of security awareness, developing robust strategies to secure our infrastructure while optimizing operational performance.

Job Responsibilities

• Design and implement security controls that enhance the cloud-native DevOps pipeline.
• Conduct security assessments and vulnerability testing on systems, applications, and infrastructure.
• Collaborate with development teams to integrate security best practices into the CI/CD pipeline.
• Monitor and respond to security incidents and alerts in a timely manner.
• Develop documentation and training materials to promote secure coding practices among developers.
• Stay abreast of emerging threats and vulnerabilities relevant to the organization's technology stack.
• Conduct security audits and assessments in compliance with industry regulations and standards.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• A minimum of 3 years of experience in a DevOps or Security Engineering role.
• Proficient in programming languages such as Python, Ruby, or Go.
• Experience with infrastructure as code (IaC) tools such as Terraform or CloudFormation.
• Strong understanding of cloud platforms like AWS, Azure, or Google Cloud.
• Certified Information Systems Security Professional (CISSP) or similar security certification is preferred.
• Familiarity with containerization technologies such as Docker and Kubernetes is a plus.

Technologies & Tools

The DevOps Security Engineer will work with a variety of modern technologies and tools to safeguard our systems and applications. Key tools include AWS Cloud Security Services, Docker, Kubernetes, Jenkins for CI/CD, Terraform for Infrastructure as Code, and various vulnerability scanning tools. Familiarity with SIEM solutions and security orchestration tools will also be beneficial in ensuring robust security posture across our infrastructure.

Ideal Candidates

The ideal candidate for this position will possess a proactive attitude towards security and a strong commitment to continuous improvement. They should have excellent problem-solving skills, with the ability to think critically in high-pressure situations. Strong communication skills are crucial for effectively collaborating with cross-functional teams. Additionally, they should demonstrate a passion for technology and an eagerness to adapt to new trends and threats in the evolving landscape of cybersecurity.