DevSecOps Cloud Security Engineer, AWS, Policy as code experience using OPA/Rego

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Jobs via Dice, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Cloud Security Engineer is responsible for integrating security practices into the DevOps process within an AWS environment. This role focuses on implementing security measures and ensuring best practices in a cloud setting, leveraging Policy as Code methodologies, specifically using OPA (Open Policy Agent) and Rego. The engineer will collaborate closely with development and operations teams to build automated security solutions, manage compliance, and ensure the safeguarding of applications and data deployed in cloud infrastructures.

Job Responsibilities

• Implement and manage security policies using OPA and Rego for cloud-native applications.
• Collaborate with development teams to integrate security practices into CI/CD pipelines.
• Conduct threat modeling and risk assessments to identify vulnerabilities in the application lifecycle.
• Automate security monitoring and incident response processes for cloud environments.
• Develop and maintain documentation of security frameworks, procedures, and guidelines.
• Engage in security reviews and audits to monitor compliance with policies and regulations.
• Provide guidance and mentorship to teams regarding secure coding practices and cloud security.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 3+ years of experience in security engineering or DevSecOps roles.
• Proficient with AWS cloud services and security architecture.
• Strong experience with Policy as Code practices using OPA/Rego.
• Familiarity with CI/CD tools such as Jenkins, GitLab CI, or similar.
• Knowledge of container security, Kubernetes, and microservices architecture.
• Understanding of compliance frameworks including GDPR, HIPAA, or PCI-DSS.

Technologies & Tools

The DevSecOps Cloud Security Engineer will utilize a range of technologies and tools such as AWS (Amazon Web Services), Open Policy Agent, Rego, Jenkins, Terraform, Docker, Kubernetes, security monitoring tools like AWS Inspector, and vulnerability assessment tools. Proficiency in scripting languages such as Python or Bash is also essential for automating security tasks.

Ideal Candidates

Ideal candidates for this position will possess a strong analytical mindset, with a proactive approach to identifying and mitigating security risks. A collaborative spirit is essential, as the role requires working closely with cross-functional teams. Additionally, successful applicants will have excellent problem-solving skills, a passion for cloud security, and a commitment to staying current with evolving security threats and technologies.