DevSecOps Engineer (Active Secret Clearance) - Security Clearance Required - Remote | WFH

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Get It Recruit - Information Technology, so some details may not match this job. The employer's own page has the real description.

Overview

The DevSecOps Engineer will play a pivotal role in enhancing the security and operational integrity of our development and deployment processes. This position demands a dedicated professional who will integrate security practices into the DevOps pipeline. The ideal candidate will collaborate closely with development and operations teams, ensuring that secure coding practices are maintained while maximizing efficiency and automating workflows. The role is fully remote and requires an active Secret Clearance, as the engineer will be handling sensitive information and systems.

Job Responsibilities

• Implement and maintain security protocols within the DevOps pipeline.
• Conduct security assessments and vulnerability testing on applications and infrastructure.
• Automate security testing phases during the software development lifecycle.
• Collaborate with cross-functional teams to promote secure coding standards and practices.
• Develop incident response strategies and contribute to the improvement of operational security posture.
• Monitor security threats and recommend countermeasures to mitigate risks.
• Provide training and guidance to development teams on security best practices.
• Generate and present reports detailing security assessments and incidents.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Active Secret Security Clearance is mandatory.
• Proven experience in a DevSecOps or similar role, spanning at least 3-5 years.
• Strong understanding of continuous integration and continuous deployment (CI/CD) methodologies.
• Proficiency in security tools and practices, such as IAM, SIEM, and DAST/SAST tools.
• Experience with cloud services (AWS, Azure, GCP) and containerization technology (Docker, Kubernetes).
• Solid knowledge of programming languages (e.g. Python, Java, Go).
• Familiarity with compliance standards (e.g. NIST, ISO 27001) and regulatory guidelines.

Technologies & Tools

The DevSecOps Engineer will utilize a variety of technologies and tools to ensure robust security practices within development processes. Common tools include continuous integration platforms like Jenkins or GitLab CI, software security tools such as SonarQube and OWASP ZAP, infrastructure as code tools like Terraform, and cloud management solutions from AWS, Azure, or Google Cloud Platform. In addition, the engineer will leverage automation frameworks and scripting languages to optimize workflows and enhance operational efficiency.

Ideal Candidates

The ideal candidates for this position possess not only the technical skills and experiences required but also the ability to communicate effectively with team members across various levels of the organization. They should demonstrate a strong commitment to security best practices and continuously seek to improve upon existing procedures. A collaborative mindset, along with strong problem-solving capabilities, will guide them in successfully navigating the challenges presented in a complex and ever-evolving technological landscape. A proactive approach to identifying vulnerabilities and recommending solutions is essential to thriving in this role.