DevSecOps Engineer (Active Secret Clearance) - REMOTE - Security Clearance Required

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker US, so some details may not match this job. The employer's own page has the real description.

Overview

The DevSecOps Engineer will play a critical role in integrating security practices into the DevOps process within a cloud environment. This position requires a thorough understanding of agile methodologies and security protocols to ensure reliable, scalable, and secure software delivery. The ideal candidate will collaborate closely with various teams to implement best practices, automate security testing, and respond proactively to emerging security threats while ensuring compliance with industry standards and government regulations. A valid active Secret Security Clearance is required for this position to handle sensitive information and systems.

Job Responsibilities

• Design and implement automated security frameworks for CI/CD pipelines.
• Conduct threat modeling and risk assessments to identify and mitigate vulnerabilities.
• Collaborate with development and operations teams to promote security awareness and best practices.
• Utilize security scanning tools to conduct regular audits and tests on applications and infrastructure.
• Monitor security incidents and provide timely responses to security breaches or threats.
• Develop and maintain documentation related to security policies, procedures, and incident responses.
• Stay up to date with the latest security trends, vulnerabilities, and compliance regulations.
• Participate in code reviews and provide actionable feedback to developers on security considerations.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Minimum of 5 years of experience in DevSecOps, security engineering, or a related area.
• Active Secret Security Clearance is required.
• Strong understanding of cloud security principles and technologies, particularly AWS or Azure.
• Proficiency in scripting languages such as Python, Bash, or PowerShell.
• Expertise in security tools such as SAST, DAST, and IAST.
• Familiarity with container orchestration and microservices architecture (e.g., Docker, Kubernetes).
• Knowledge of compliance frameworks (e.g., NIST, ISO 27001) and security best practices.

Technologies & Tools

The DevSecOps Engineer will engage with a wide array of technologies, including but not limited to cloud service platforms (AWS, Azure), CI/CD tools (Jenkins, GitLab CI), version control systems (Git), containerization technologies (Docker, Kubernetes), and security tools (Fortify, Checkmarx, Nessus). Experience with infrastructure as code (IaC) tools like Terraform or CloudFormation will also be beneficial for this role.

Ideal Candidates

The ideal candidate for the DevSecOps Engineer position will possess strong analytical and problem-solving skills, with an emphasis on proactive risk management and threat mitigation. They will demonstrate excellent communication skills to effectively collaborate within cross-functional teams and convey complex security concepts to non-technical stakeholders. The candidate should be adaptable, detail-oriented, and passionate about security, dedicated to continuous learning and improvement in the field.