DevSecOps Engineer (Active Secret Clearance) - REMOTE - Security Clearance Required

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by ecocareers, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer will be instrumental in integrating security practices into the DevOps process within a dynamic and collaborative remote environment. The role requires a proactive approach to maintain high security standards while enabling rapid deployment of applications. The successful candidate will leverage their technical expertise to automate security processes, conduct vulnerability assessments, and collaborate with cross-functional teams to ensure adherence to security protocols, thereby enhancing the overall security posture of the organization.

Job Responsibilities

• Design and implement secure coding practices and security automation within the DevOps pipeline.
• Conduct security assessments, vulnerability scanning, and threat modeling to identify and mitigate security risks.
• Collaborate with development and operations teams to embed security into pipelines and processes.
• Monitor and analyze security alerts and incidents, responding swiftly to breaches or potential vulnerabilities.
• Provide guidance on security best practices and compliance standards across the organization.
• Develop and enhance security policies, procedures, and documentation to strengthen security governance.
• Engage in continuous improvement initiatives to embed a security-first mindset organizationally.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• A minimum of 4 years of relevant experience in DevSecOps, as a Security Engineer, or a related role.
• Valid Active Secret Clearance.
• Proficient in various programming/scripting languages such as Python, Bash, or PowerShell.
• Experience with containerization technologies such as Docker and orchestration tools such as Kubernetes.
• Strong understanding of cloud security concepts and platforms (e.g., AWS, Azure, GCP).
• Familiarity with CI/CD tools and methodologies, including Jenkins, GitLab, or similar.
• Knowledge of compliance frameworks and standards (e.g., NIST, ISO 27001, or equivalent).

Technologies & Tools

The DevSecOps Engineer will utilize a variety of technologies and tools to effectively perform their duties. This includes, but is not limited to, security assessment tools such as Snyk or Fortify, CI/CD platforms like Jenkins or GitLab CI, configuration management tools like Ansible or Puppet, and cloud platforms such as AWS and Azure. Additionally, the engineer will leverage monitoring tools for security events such as SIEM (Security Information and Event Management) solutions to enhance the security infrastructure.

Ideal Candidates

The ideal candidates for this position will possess a blend of technical prowess and collaborative spirit, with a keen eye for detail and a drive to innovate within security processes. They will thrive in fast-paced environments and adapt quickly to changing security landscapes. A strong problem solver who communicates effectively with both technical and non-technical stakeholders will excel in this role. Additionally, candidates who actively pursue continuous learning and professional development will find themselves well-suited for success in our evolving organization.