DevSecOps Engineer - 100% Remote & Short Term Engagement

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Booker DiMaio, so some details may not match this job. The employer's own page has the real description.

Position Overview

As a DevSecOps Engineer at Booker DiMaio, you will play a crucial role in integrating security measures into our development and operations processes. This position focuses on embedding security practices within the CI/CD pipeline while collaborating closely with development, operations, and security teams. Your expertise will ensure that our applications and systems are resilient, compliant, and ready to tackle modern security challenges in a 100% remote, short-term engagement environment.

Job Responsibilities

• Implement and manage security best practices in the CI/CD environment.
• Conduct security assessments and vulnerability scans to identify weaknesses in applications and infrastructure.
• Collaborate with development and operations teams to automate security-related tasks and processes.
• Develop and maintain security policies, standards, and guidelines.
• Analyze security incidents and provide post-incident reviews to prevent future occurrences.
• Provide training and support to development teams on secure coding practices and tools.
• Ensure compliance with industry security standards and regulatory requirements.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.
• At least 3 years of experience in DevSecOps or a related role.
• Proficiency in scripting languages such as Python, Bash, or PowerShell.
• Hands-on experience with security tools such as SAST, DAST, and IAST.
• Strong understanding of cloud platforms (AWS, Azure, GCP) and their security features.
• Knowledge of containerization technologies (Docker, Kubernetes) and their security implications.
• Relevant security certifications (e.g., CISSP, CEH, or SANS) are highly desirable.

Technologies & Tools

In this position, you will utilize a range of technologies and tools designed to enhance security across our development lifecycle. These include automation scripts, CI/CD pipelines using Jenkins or GitLab, security analysis tools like OWASP ZAP, AWS security services such as IAM and GuardDuty, as well as container security platforms. Familiarity with Git for version control and Jira for issue tracking will also be advantageous.

Ideal Candidates

The ideal candidate for this role should possess a strong blend of technical acumen and a proactive mindset towards security practices. You should be collaborative, able to work effectively in a remote team environment, and communicate complex security concepts in a straightforward manner to both technical and non-technical stakeholders. A passion for innovation and continuous improvement in security methodologies will be key to succeeding in this role.