DevSecOps Engineer |100% Remote | No C2C

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Vaco, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer at Vaco will play a crucial role in integrating security practices within the DevOps process. This position demands a proactive approach to identifying risks, implementing security best practices throughout the software development lifecycle, and ensuring that all CI/CD pipelines are secure. The engineer will collaborate closely with development, operations, and security teams to enhance the overall security posture and maintain compliance with industry standards.

Job Responsibilities

• Design and implement security measures in CI/CD pipelines to ensure secure software deliveries.
• Conduct regular security assessments, vulnerability scans, and threat modeling.
• Collaborate with development teams to integrate security requirements into project workflows.
• Automate security processes to enhance efficiency and effectiveness.
• Monitor and respond to security incidents across multiple environments.
• Provide guidance and training to teams on security best practices and tools.
• Stay updated on the latest security trends and vulnerabilities relevant to the technology stack.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 3+ years of experience in DevOps, Security Engineering, or a related role.
• Strong understanding of application security principles and practices.
• Experience with CI/CD tools such as Jenkins, GitLab CI, or similar.
• Proficiency in scripting languages such as Python, Bash, or similar.
• Familiarity with cloud security best practices and platforms like AWS, Azure, or GCP.
• Industry certifications related to security (e.g., CISSP, CISM, or comparable) are a plus.

Technologies & Tools

The DevSecOps Engineer will utilize various technologies and tools to promote security within the DevOps practices. This includes CI/CD tools such as Jenkins and GitLab, security scanning tools such as Snyk or Aqua, containerization technologies like Docker and Kubernetes, and scripting languages such as Python and Bash. Familiarity with cloud environments, particularly AWS, Azure, or GCP, will also be essential in executing effective security strategies.

Ideal Candidates

Ideal candidates for the DevSecOps Engineer position will possess a strong balance of technical expertise and soft skills. They should demonstrate a keen interest in continuous learning and adapting to new security technologies. Strong analytical thinking and problem-solving abilities are essential, along with effective communication skills to collaborate with cross-functional teams. An inclination towards automation and a proactive approach to security challenges will greatly benefit the role.