DevSecOps Engineer--100% Remote

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Avance Consulting, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer at Avance Consulting plays a crucial role in integrating security practices into the DevOps process. This position involves collaborating with development and operations teams to ensure that security is integrated at every stage of the software development lifecycle. The engineer will be responsible for implementing security measures, conducting vulnerability assessments, and fostering a culture of security awareness across the organization. The goal is to deliver high-quality software solutions while minimizing risks and ensuring compliance with industry standards.

Job Responsibilities

• Collaborate with development and operations teams to integrate security into the CI/CD pipeline.
• Conduct security assessments and vulnerability scans on applications and infrastructure.
• Implement and monitor security controls and best practices in accordance with industry standards.
• Develop and maintain security policies, procedures, and documentation.
• Provide security training and awareness programs for development and operations teams.
• Conduct incident response and forensic investigations when security breaches occur.
• Evaluate and recommend security tools and technologies to improve the overall security posture.
• Stay up-to-date with the latest security trends, threats, and vulnerabilities.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 3 years of experience in DevOps, security engineering, or related fields.
• Strong knowledge of cloud platforms such as AWS, Azure, or Google Cloud.
• Experience with CI/CD tools and processes (e.g., Jenkins, GitLab, or similar).
• Proficiency in scripting languages such as Python, Bash, or PowerShell.
• Familiarity with security frameworks and standards (e.g., NIST, ISO 27001, OWASP).
• Strong analytical and problem-solving skills.
• Excellent communication and teamwork abilities.

Technologies & Tools

The DevSecOps Engineer will utilize a variety of technologies and tools to ensure security throughout the development lifecycle. Key technologies include Docker for containerization, Terraform for infrastructure as code, various security assessment tools (e.g., Snyk, Nessus), CI/CD platforms like Jenkins or GitHub Actions, and cloud services such as AWS and Azure. Familiarity with configuration management tools (e.g., Ansible, Puppet, or Chef) is also essential for automating security tasks.

Ideal Candidates

The ideal candidate for the DevSecOps Engineer position at Avance Consulting will possess a proactive and security-driven mindset. They should be passionate about secure coding practices and have a strong desire to minimize risk while enhancing development efficiency. This individual is expected to be a collaborative team player, able to articulate security concepts clearly to technical and non-technical stakeholders. Additionally, they should exhibit a continuous learning attitude, staying informed about emerging security threats and best practices.