DevSecOps Engineer - 100% Remote & Short Term Engagement

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Booker DiMaio, so some details may not match this job. The employer's own page has the real description.

Position Overview

The DevSecOps Engineer at Booker DiMaio will play a critical role in integrating security practices into the DevOps process while ensuring that application development and deployment are carried out seamlessly and efficiently. This position will involve collaborating with development teams to implement security measures throughout the software development lifecycle, aiming to automate security checks and minimize risks. The ideal candidate will possess a strong background in both development and security, with a keen focus on enhancing application security and performance in a 100% remote and short-term engagement environment.

Job Responsibilities

• Design, implement, and maintain a security framework within the DevOps pipeline.
• Collaborate with development teams to integrate security practices into CI/CD processes.
• Conduct security assessments and vulnerability analyses on applications and infrastructure.
• Automate security checks through tooling and scripts to ensure continuous security monitoring.
• Provide guidance and training to developers on secure coding practices.
• Monitor security compliance with industry standards and regulatory requirements.
• Participate in incident response planning and remediation efforts for security breaches.
• Stay updated on the latest threats and vulnerabilities to enhance security measures.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Proven experience in a DevSecOps role or similar position.
• Strong knowledge of security best practices in cloud environments (AWS, Azure, Google Cloud).
• Familiarity with automation tools (e.g., Jenkins, GitLab CI/CD, GitHub Actions).
• Hands-on experience with security testing tools (e.g., SAST, DAST, IAST tools).
• Knowledge of coding languages such as Python, Java, or JavaScript.
• Strong understanding of container security practices, especially in Kubernetes.
• Certifications in security (e.g., CISSP, CEH, or related) are a plus.

Technologies & Tools

The DevSecOps Engineer will engage with a variety of technologies and tools that facilitate the automation and integration of security within DevOps practices. Key technologies include cloud platforms such as Amazon Web Services (AWS), continuous integration and deployment tools like Jenkins or GitHub Actions, security testing applications such as SonarQube or Snyk, as well as container orchestration tools including Docker and Kubernetes. Proficiency in scripting languages like Python or Bash will be pivotal for automating security checks and processes.

Ideal Candidates

The ideal candidates for the DevSecOps Engineer position will be proactive problem-solvers with a strong inclination towards security enhancements within development workflows. They will possess excellent communication skills, enabling effective collaboration with cross-functional teams. A commitment to continuous learning and adapting to the evolving security landscape is essential. Furthermore, an analytical mindset, attention to detail, and a passion for implementing robust security measures will define a successful candidate in this role.