DevSecOps Engineer--100% Remote

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Avance Consulting, so some details may not match this job. The employer's own page has the real description.

Job Overview

Avance Consulting is seeking a dedicated DevSecOps Engineer to join our team in a fully remote capacity. The successful candidate will play a critical role in integrating security practices within the DevOps process, ensuring the development and deployment of secure, reliable applications. This position will require a balance of development, system administration, and security management skills, contributing to a culture of continuous enhancement of the security posture of our software solutions.

Job Responsibilities

• Design and implement robust security practices in the CI/CD pipelines.
• Collaborate with development, operations, and security teams to ensure secure coding standards are followed.
• Conduct vulnerability assessments and threat modeling on applications and infrastructure.
• Automate security controls, processes, and compliance findings to achieve better operational security throughout the software development lifecycle.
• Monitor and respond to security incidents while preparing detailed reports and documentation.
• Keep abreast of the latest security trends, threats, and mitigation techniques.
• Assist in the adoption of secure coding and development practices across teams.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 3 years of experience in DevOps, System Administration, or Software Development.
• Proven experience in implementing security measures in CI/CD processes.
• Strong knowledge of security frameworks and standards such as NIST, ISO 27001, or OWASP.
• Familiarity with containerization technologies, such as Docker and Kubernetes.
• Experience with cloud platforms like AWS, Azure, or Google Cloud.
• Solid understanding of networking concepts and firewalls.
• Effective communication skills and ability to collaborate across multidisciplinary teams.

Technologies & Tools

The DevSecOps Engineer position at Avance Consulting utilizes a wide range of technologies and tools designed to ensure secure software development and operations. Key technologies include continuous integration and deployment tools such as Jenkins, GitLab CI/CD, or CircleCI, as well as security analysis tools like Snyk or Aqua Security. Proficiency in scripting languages such as Python or Bash is crucial, alongside experience with cloud service APIs and configuration management tools like Ansible or Terraform.

Ideal Candidates

Ideal candidates for the DevSecOps Engineer role should possess a curious mindset and a strong commitment to continuous learning and improvement. They should demonstrate exceptional problem-solving skills and the ability to work in a collaborative, fast-paced environment. A proactive approach to identifying and mitigating security vulnerabilities while maintaining a balance between development speed and security is essential. The ability to communicate complex security issues in a clear manner to both technical and non-technical stakeholders is highly valued.