DevSecOps Engineer - 100% Remote & Short Term Engagement

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker US, so some details may not match this job. The employer's own page has the real description.

Job Overview

RemoteWorker US is seeking a skilled DevSecOps Engineer for a short-term engagement that offers the flexibility of a 100% remote work environment. The ideal candidate will play a crucial role in integrating security practices throughout the software development lifecycle. This position will involve collaboration with development, operations, and security teams to enhance security measures, automate processes, and ensure compliance with industry standards. The candidate will be responsible for identifying vulnerabilities, implementing security tools, and promoting security awareness within the engineering teams.

Job Responsibilities

• Integrate security practices within CI/CD pipelines to enhance software delivery.
• Identify, assess, and remediate security vulnerabilities in applications and infrastructure.
• Implement and manage security tools and frameworks to automate security testing.
• Collaborate with cross-functional teams to ensure compliance with security policies and regulations.
• Conduct security audits and assessments, providing actionable recommendations for improvement.
• Develop and maintain documentation related to security processes and protocols.
• Provide training and support to development teams on secure coding practices.
• Monitor security alerts and incidents, performing root cause analysis and incident response as necessary.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Proven experience in a DevSecOps or security engineering role.
• Strong proficiency in scripting languages such as Python, Bash, or PowerShell.
• Solid understanding of cloud security practices and SaaS security models.
• Experience with security tools, including static and dynamic application security testing tools (SAST/DAST).
• Familiarity with compliance frameworks such as OWASP, NIST, or ISO 27001.
• Excellent problem-solving skills and the ability to work effectively in a team environment.
• Relevant certifications (e.g., CISSP, CISM, SecDevOps) are preferred but not required.

Technologies & Tools

The DevSecOps Engineer will work with a diverse set of technologies and tools, including but not limited to CI/CD platforms such as Jenkins, security scanning tools like Snyk and Burp Suite, and configuration management tools such as Terraform and Ansible. Familiarity with cloud platforms (AWS, Azure, Google Cloud) and container orchestration tools like Kubernetes will also be essential for addressing security within cloud environments.

Ideal Candidates

The ideal candidate for this position will possess a strong security mindset and an eagerness to adopt new technologies and methodologies. Attention to detail and a proactive approach towards identifying and addressing potential security flaws are essential traits. Candidates should demonstrate excellent communication skills, allowing for effective collaboration across teams, as well as a passion for fostering a security-first culture within development practices.