DevSecOps Engineer (Active Secret Clearance) - REMOTE - Security Clearance Required

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker US, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer plays a crucial role in integrating security practices within the DevOps process, enhancing the software development lifecycle while ensuring compliance with security policies and standards. This position will involve collaborating with cross-functional teams to automate security processes, conduct security assessments, and implement best practices throughout the development lifecycle. The ideal candidate will possess an active Secret Clearance and will work primarily in a remote capacity, ensuring secure and efficient deployments of applications across multiple environments.

Job Responsibilities

• Implement and maintain automated security scanning tools within the CI/CD pipeline.
• Collaborate with development teams to incorporate security best practices in coding, testing, and deployment.
• Conduct regular security assessments and vulnerability scans, providing actionable insights.
• Design and implement governance frameworks for secure software development.
• Develop and maintain incident response plans to mitigate security risks.
• Work with infrastructure teams to ensure secure configuration management and patching.
• Facilitate training sessions for developers on secure coding practices and threat modeling.
• Monitor security trends and vulnerabilities, staying up-to-date with emerging threats in the software landscape.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Minimum of 5 years of experience in DevOps, Security, or a related area.
• Proven experience with security tools such as SAST, DAST, and static code analysis tools.
• Strong understanding of cloud security principles and experience with AWS, Azure, or Google Cloud.
• Working knowledge of scripting languages (Python, Bash, etc.) for automating security tasks.
• Comprehensive knowledge of security frameworks and compliance standards (NIST, ISO 27001, etc.).
• Active Secret Clearance is mandatory for this position.
• Excellent communication and collaboration skills to work effectively in cross-disciplinary teams.

Technologies & Tools

The DevSecOps Engineer will employ a variety of technologies and tools to enhance security within the development process. Key tools include CI/CD platforms like Jenkins and GitLab, security scanning tools such as SonarQube and Fortify, cloud security solutions, version control systems like Git, and configuration management solutions such as Ansible or Terraform. Familiarity with container technologies like Docker and orchestration through Kubernetes is also essential for managing secure application environments.

Ideal Candidates

Ideal candidates for the DevSecOps Engineer role possess a mix of technical acumen, problem-solving capabilities, and strong communication skills. They should have a proactive mindset, demonstrating initiative in identifying security challenges and proposing solutions. Additionally, candidates should be adaptable to rapidly changing environments and committed to continuous learning to stay ahead in the field of cybersecurity and DevOps practices. A collaborative spirit will be essential for working with various teams across the organization, ensuring a robust security posture throughout the development lifecycle.