DevSecOps Engineer (Active Secret Clearance) - REMOTE - Security Clearance Required

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by ecocareers, so some details may not match this job. The employer's own page has the real description.

Overview

The DevSecOps Engineer will play a pivotal role in integrating security measures throughout the software development lifecycle, ensuring the effectiveness of security protocols while enhancing operational efficiencies. This remote position requires a proactive and innovative individual who will collaborate with various teams to implement security best practices, automate security processes, and deliver solutions aligned with the latest industry standards. The ideal candidate will possess an Active Secret Clearance and be committed to driving security-focused initiatives within the development process.

Job Responsibilities

• Design, implement, and maintain automated security tools and processes to integrate security into CI/CD pipelines.
• Conduct vulnerability assessments, penetration testing, and security audits on applications and cloud infrastructures.
• Collaborate with development and operations teams to promote a culture of security and best practices throughout the development lifecycle.
• Perform threat modeling and risk assessments to identify security gaps and propose actionable remediation strategies.
• Monitor security incidents, conduct investigations, and provide incident response as needed.
• Create and maintain comprehensive documentation related to security procedures, policies, and best practices.
• Stay current with emerging security technologies, trends, and regulatory requirements to enhance organizational security posture.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• A minimum of 3 years of experience in DevSecOps, cybersecurity, or a similar role.
• Strong understanding of security protocols, cryptography, and secure coding practices.
• Experience with cloud services (AWS, Azure, Google Cloud) and security implementations in these environments.
• Proficiency in scripting languages such as Python, Bash, or PowerShell.
• Knowledge of security frameworks and standards (e.g., NIST, ISO 27001).
• Active Secret Clearance is required for this position.

Technologies & Tools

The DevSecOps Engineer will utilize a variety of modern technologies and tools, including but not limited to CI/CD tools such as Jenkins and GitLab, configuration management tools like Ansible or Puppet, containerization technologies such as Docker and Kubernetes, as well as security-specific tools like Snyk, Nessus, and Burp Suite. Familiarity with version control systems like Git, along with monitoring tools such as Splunk or ELK Stack, will also be essential for this role.

Ideal Candidates

The ideal candidates for the DevSecOps Engineer position are individuals who possess a strong analytical mindset coupled with excellent problem-solving skills. A collaborative spirit and the ability to communicate complex security concepts to non-technical stakeholders are essential. Candidates should demonstrate a passion for continuous learning and adapting to new technologies and security practices, with a genuine commitment to enhancing the overall security posture of the organization.