DevSecOps Engineer (Active Secret Clearance) - REMOTE - Security Clearance Required

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by ecocareers, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer (Active Secret Clearance) will be responsible for integrating security practices into the DevOps process through the entire software development lifecycle. The candidate will work collaboratively with cross-functional teams to enhance security measures, conduct risk assessments, and implement automated solutions for security vulnerabilities. This remote position requires the ability to effectively communicate security requirements and foster a culture of security awareness within the development teams while ensuring compliance with applicable standards and practices.

Job Responsibilities

• Develop and implement security policies and procedures to support continuous integration and continuous delivery (CI/CD) practices.
• Collaborate with software developers and IT operations to enhance system security and mitigate potential risks.
• Identify, analyze, and remediate security vulnerabilities across development and deployment processes.
• Automate security testing and deployment using tools and frameworks suitable for DevSecOps environments.
• Conduct risk assessments and analyze potential security risks and provide recommendations for remediation.
• Monitor and report on security incidents, providing timely updates and actionable insights to stakeholders.
• Stay current with the latest security trends, threats, and technology solutions to continuously improve security measures.
• Conduct training sessions and workshops to promote security awareness among development teams.

Qualifications

• Active Secret Clearance is required.
• Bachelor's degree in Computer Science, Information Systems, or related field.
• Proven experience working in a DevSecOps role or similar capacity within software development.
• Strong understanding of security principles, practices, and tools, particularly in a CI/CD environment.
• Familiarity with cloud computing security (AWS, Azure, or GCP).
• Proficiency in scripting and automation tools (Python, Bash, etc.).
• Experience with security testing tools such as SAST, DAST, and SCA.
• Excellent problem-solving skills and ability to work under pressure to meet deadlines.

Technologies & Tools

The DevSecOps Engineer will work with a variety of technologies and tools, including but not limited to Jenkins for CI/CD, Docker and Kubernetes for containerization, various cloud platforms (AWS, Azure, GCP), security automation tools like Aqua Security or Twistlock, as well as code quality and vulnerability assessment tools like SonarQube and Checkmarx. Familiarity with IaC (Infrastructure as Code) tools such as Terraform is also beneficial.

Ideal Candidates

Ideal candidates for this position will possess a strong passion for security and development, demonstrating a proactive approach to identifying and addressing security concerns. They should possess exceptional analytical skills and the ability to think critically and strategically about security integration within software development. Excellent communication and collaboration abilities are essential, as the role requires working closely with various cross-functional teams. Furthermore, an individual who thrives in a dynamic, fast-paced environment and is committed to maintaining up-to-date knowledge of evolving security trends will be well-suited for this role.