DevSecOps Engineer (Active Secret Clearance) - REMOTE - Security Clearance Required

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by ecocareers, so some details may not match this job. The employer's own page has the real description.

Overview

The DevSecOps Engineer will play a pivotal role in integrating security practices into the DevOps process, ensuring that security is embedded into every aspect of the software development lifecycle. The position demands proactive assessment and evaluation of potential vulnerabilities in applications, infrastructure, and data management while implementing robust security measures. The successful candidate will work collaboratively with development, operations, and security teams to promote a culture of security awareness and adherence to best practices, all while holding an active Secret Clearance.

Job Responsibilities

• Implement and manage security tools and procedures within the CI/CD pipeline.
• Conduct risk assessments in line with security compliance frameworks.
• Develop and enforce security policies, procedures, and standards.
• Monitor and respond to security incidents, ensuring prompt resolution.
• Work closely with software developers to build secure applications and obtain security certifications.
• Automate security testing and auditing processes to ensure comprehensive coverage.
• Provide training and awareness programs for team members on secure coding practices and standards.
• Participate in regular security reviews and audits to ensure compliance with regulatory requirements.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 5+ years of experience in DevOps or a related discipline, with a strong focus on security.
• Active Secret Clearance is required.
• Proficient in scripting languages (e.g., Python, Bash) and automation tools.
• Experience with AWS, Azure, or similar cloud platforms.
• Familiarity with security frameworks such as NIST, ISO, or CIS.
• Strong knowledge of security protocols, cryptography, and network security.
• Excellent problem-solving skills and attention to detail.

Technologies & Tools

The DevSecOps Engineer will utilize a variety of technologies and tools, including cloud environments such as AWS and Azure, configuration management tools like Ansible and Terraform, security assessment and testing tools such as Snyk, Fortify, and Burp Suite, as well as CI/CD platforms like Jenkins and GitLab. Familiarity with containerization technologies like Docker and orchestration platforms like Kubernetes is also essential for this role.

Ideal Candidates

The ideal candidate for this position will possess a strong technical foundation complemented by a proactive approach to security within DevOps practices. They will demonstrate superior analytical and problem-solving skills, the ability to communicate effectively across various teams, and a commitment to continuous learning and improvement in the face of evolving security threats. A strong sense of collaboration and the ability to foster relationships in a remote work environment are also crucial to thrive in this role.