DevSecOps Engineer (Active Secret Clearance) - Security Clearance Required - Remote | WFH

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Get It Recruit - Information Technology, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer will play a pivotal role in integrating security practices within the DevOps methodology while ensuring robust security measures are in place. This position involves working collaboratively with development, operations, and security teams to automate security testing and monitoring processes, thereby fostering a culture of security within the software development lifecycle. The ideal candidate will possess a strong background in information security, software engineering, and systems administration, and will hold an active Secret Security Clearance. This role offers remote work options, enabling the individual to contribute effectively to the organization from a flexible location.

Job Responsibilities

• Implement and maintain security practices within the DevOps pipeline.
• Automate security testing, monitoring, and remediation at every stage of the software development lifecycle.
• Conduct security assessments and vulnerability management for applications and infrastructure.
• Collaborate with cross-functional teams to integrate security requirements into CI/CD processes.
• Design and implement security policies, standards, and procedures.
• Provide guidance on security best practices to development and operations teams.
• Monitor and analyze security incidents, conducting root cause analysis and remediation.
• Maintain knowledge of the latest security trends, threats, and vulnerabilities.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 3-5 years of experience in DevSecOps, information security, or a related discipline.
• Active Secret Security Clearance is mandatory.
• Proficiency in security tools such as static and dynamic analysis tools, SAST, DAST, and security orchestration tools.
• Understanding of cloud security principles and experience with cloud service providers (e.g., AWS, Azure).
• Knowledge of programming and scripting languages such as Python, Bash, or PowerShell.
• Familiarity with container security and orchestration technologies (Docker, Kubernetes).
• Strong analytical, problem-solving, and communication skills.

Technologies & Tools

The DevSecOps Engineer will utilize a wide array of technologies and tools to streamline processes and enhance security measures. Key technologies include cloud platforms such as Amazon Web Services (AWS) and Microsoft Azure, security tools for vulnerability assessments and penetration testing, CI/CD tools like Jenkins or GitLab, as well as containerization technologies such as Docker and orchestration platforms like Kubernetes. Familiarity with monitoring and logging tools such as Splunk or ELK Stack may also be beneficial in this role.

Ideal Candidates

Ideal candidates for this position will exhibit a strong commitment to security and a proactive attitude toward identifying risks within systems and software. They should be detail-oriented with the ability to think critically and address complex security challenges. Successful candidates will demonstrate robust technical expertise along with effective communication skills, enabling them to convey security concepts clearly to both technical and non-technical stakeholders. A passion for continuous learning and adaptation in the fast-paced world of technology is essential for thriving in this environment.