DevSecOps Engineer (Active Secret Clearance) - REMOTE - Security Clearance Required

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker US, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer with an Active Secret Clearance will play a vital role in enhancing the security posture of our software development lifecycle. This position is focused on integrating security practices within the DevOps framework, ensuring that security is embedded throughout the development process and operational environment. The successful candidate will collaborate with cross-functional teams to design, implement, and maintain robust security solutions, while also driving awareness and compliance to security standards across multiple projects. This position is fully remote, supporting our commitment to provide secure solutions in a distributed work environment.

Job Responsibilities

• Integrate security controls and requirements into the DevOps pipeline to ensure a secure software delivery process.
• Conduct security assessments and vulnerability analyses on applications and systems, implementing remediation strategies as needed.
• Work collaboratively with development and operations teams to educate and advise on security best practices.
• Automate security testing and monitoring processes to improve efficiency and effectiveness.
• Develop security-focused operational procedures, documentation, and training materials.
• Monitor security incidents and respond effectively to evolving threats and vulnerabilities.
• Ensure compliance with security policies, regulations, and standards applicable to the organization.
• Act as a technical resource for security tools, frameworks, and technologies used across projects.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Minimum of 5 years of experience in DevOps, cybersecurity, or a related discipline.
• Active Secret Clearance is mandatory for this position.
• Strong understanding of cloud environments (AWS, Azure, or Google Cloud) and associated security best practices.
• Proficiency in scripting languages (Python, Bash, etc.) and automation tools (Terraform, Ansible, Jenkins).
• Experience with CI/CD implementation and security tools such as SAST, DAST, and IAST.
• Knowledge of security compliance frameworks (NIST, ISO, etc.) and industry standards.
• Excellent problem-solving skills and ability to work independently in a remote work environment.

Technologies & Tools

The DevSecOps Engineer will utilize a variety of technologies and tools to enhance security within the development lifecycle. Key technologies include cloud services such as AWS and Azure, security tools such as Splunk and Nessus, continuous integration/continuous deployment (CI/CD) tools like Jenkins and GitLab, and infrastructure as code (IaC) tools such as Terraform. Familiarity with containerization technologies like Docker and orchestration platforms like Kubernetes is also beneficial for ensuring security in modern application environments.

Ideal Candidates

The ideal candidate for the DevSecOps Engineer position is a proactive and detail-oriented professional who possesses a strong security mindset combined with a deep understanding of DevOps principles. They are innovative thinkers who can adapt to rapidly evolving technologies and security threats. Excellent communication skills, both verbal and written, are essential for this role, as collaboration with various teams is paramount. A strong commitment to continuous learning and a passion for improving security practices within the software development process are qualities that will set the right candidate apart from the rest.