DevSecOps Engineer (Active Secret Clearance) - Security Clearance Required - Remote | WFH

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Get It Recruit - Information Technology, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer will play a crucial role in integrating security practices within the DevOps process. This position is essential for ensuring that security is a fundamental aspect of the software development lifecycle. The selected candidate will work closely with development and operations teams to implement security controls, conduct risk assessments, and perform vulnerability management. Remote work capability is provided, making this an excellent opportunity for professionals seeking flexibility while working on innovative security solutions in a fast-paced environment.

Job Responsibilities

• Develop and implement security protocols, policies, and best practices within the DevOps framework.
• Collaborate with cross-functional teams to integrate security into the CI/CD pipelines.
• Perform security assessments, threat modeling, and risk analysis for applications and infrastructure.
• Monitor and respond to security incidents and vulnerabilities in a timely manner.
• Automate security-related tasks to improve efficiency and reduce manual intervention.
• Provide training to development teams on secure coding practices and tools.
• Stay current with emerging security trends and technologies to continuously enhance security posture.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Active secret security clearance is required.
• Minimum of 3-5 years of experience in DevSecOps or related fields.
• Strong knowledge of security principles, practices, and frameworks.
• Experience with automation tools (e.g., Jenkins, GitLab CI/CD).
• Proficiency in programming or scripting languages (e.g., Python, Bash, PowerShell).
• Familiarity with cloud services (e.g., AWS, Azure, Google Cloud) and container security.
• Certifications such as CISSP, CISM, or similar are a plus.

Technologies & Tools

The DevSecOps Engineer will utilize a variety of technologies and tools to ensure effective security integration. Key tools include Jenkins for continuous integration, Git for version control, tools for application security scanning like OWASP ZAP or Snyk, cloud services from AWS or Azure, and configuration management tools such as Ansible or Terraform. Familiarity with containerization technologies like Docker and orchestration tools like Kubernetes is also pertinent for this role.

Ideal Candidates

Ideal candidates for this position will possess a strong analytical mindset, demonstrating the ability to troubleshoot complex security issues efficiently. They should exhibit strong communication skills, enabling effective collaboration with various teams across the organization. A proactive approach towards cybersecurity challenges is essential, along with a passion for staying updated with the latest technologies and security vulnerabilities. Candidates who thrive in fast-paced environments and have a natural inclination for innovation in security practices will be well-suited for this role.