DevSecOps Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by ComTec Information Systems (IT), so some details may not match this job. The employer's own page has the real description.

Overview

ComTec Information Systems is seeking a skilled DevSecOps Engineer who will play a crucial role in integrating security practices into the DevOps process. The successful candidate will be responsible for implementing security measures throughout the development lifecycle, fostering collaboration between development, security, and operations teams. This position requires a proactive individual who is familiar with both development and operations, ensuring that security is a priority from the conception to the deployment of applications.

Job Responsibilities

• Implement and manage security practices in various stages of the software development lifecycle (SDLC).
• Identify, assess, and remediate security vulnerabilities in applications and systems.
• Work closely with development teams to embed security best practices into their workflows.
• Automate security controls and monitoring processes.
• Analyze security incidents and provide insights for preventing future occurrences.
• Design, implement, and continuously improve CI/CD pipelines with a security focus.
• Conduct risk assessments and vulnerability assessments on software and infrastructure.
• Stay updated with the latest security trends and compliance standards.
• Provide training and awareness programs to team members on security policies and practices.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Minimum of 3 years of experience in DevSecOps, DevOps, or a related role.
• Strong understanding of security practices in cloud environments (AWS, Azure, GCP).
• Familiarity with containerization technologies (Docker, Kubernetes).
• Experience with security tools such as SAST, DAST, and infrastructure-as-code (IaC) security scanners.
• Proficient in scripting languages (e.g., Python, Bash) and automation tools (e.g., Ansible, Terraform).
• Knowledge of application security methodologies and compliance frameworks (e.g., OWASP, NIST, ISO 27001).
• Excellent problem-solving skills and attention to detail.
• Strong communication and collaboration abilities.

Technologies & Tools

The DevSecOps Engineer will utilize a variety of technologies and tools to ensure security is integrated throughout the development process. These may include CI/CD tools such as Jenkins or GitLab CI, cloud security solutions like AWS Security Hub or Azure Security Center, infrastructure as code tools (Terraform, Ansible), application security scanners (OWASP ZAP, Fortify), and container orchestration platforms (Kubernetes, Docker). Knowledge of version control systems like Git will also be essential for collaboration with the development team.

Ideal Candidates

Ideal candidates for the DevSecOps Engineer position at ComTec Information Systems will be proactive, detail-oriented professionals with a strong passion for security and technology. They will possess excellent analytical skills, enabling them to identify potential security threats effectively. Strong communication and teamwork skills are essential, as this role requires close collaboration with developers and IT operations staff. A continuous learner who stays updated with the latest in cybersecurity trends and best practices will thrive in this environment, ensuring that security remains a priority in every project.