DEVSECOPS ENGINEER

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Criterion Systems, so some details may not match this job. The employer's own page has the real description.

Overview

The DEVSECOPS ENGINEER at Criterion Systems will play a crucial role in integrating security practices into the DevOps processes. This position will involve collaboration with cross-functional teams to enhance the security, compliance, and governance of software delivery pipelines. The candidate will be responsible for automating security checks, identifying vulnerabilities, and implementing best practices to create a robust and secure development environment. The ideal candidate should be knowledgeable in both development and security methodologies and understand how to apply them effectively in an Agile setting.

Job Responsibilities

• Design, implement, and manage security solutions within the CI/CD pipeline.
• Collaborate with development, operations, and security teams to promote DevSecOps best practices.
• Automate security testing and facilitate continuous integration/continuous deployment (CI/CD).
• Conduct security assessments, vulnerability scans, and penetration testing on applications and infrastructure.
• Analyze security incidents and develop effective response strategies.
• Stay up to date on the latest security trends, vulnerabilities, and regulatory requirements.
• Provide training and support for development teams on security-related topics.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Minimum of 3 years of experience in security engineering, DevOps, or a related position.
• Strong understanding of development methodologies, security frameworks, and compliance standards (e.g., NIST, OWASP).
• Proficiency in scripting languages such as Python, Bash, or PowerShell.
• Experience with CI/CD tools (e.g., Jenkins, GitLab CI, CircleCI) and containerization technologies (e.g., Docker, Kubernetes).
• Familiarity with cloud security practices and services (e.g., AWS, Azure, Google Cloud Platform).
• Certifications in security (e.g., CISSP, CEH, CISM) are a plus.

Technologies & Tools

The DEVSECOPS ENGINEER will utilize a variety of technologies and tools to ensure robust security throughout the software development lifecycle. This includes proficiency in CI/CD tools such as Jenkins and GitLab, security scanning tools like Snyk or Aqua Security, container management platforms like Docker and Kubernetes, as well as cloud platforms such as AWS or Azure. Familiarity with configuration management tools such as Ansible or Terraform will also be instrumental in automating security checks within the infrastructure.

Ideal Candidates

The ideal candidate for the DEVSECOPS ENGINEER position at Criterion Systems will possess a proactive and analytical mindset, coupled with strong problem-solving skills. They should exhibit excellent communication and collaboration abilities, allowing them to effectively liaise with diverse teams and stakeholders. A successful candidate will also be adaptable and willing to learn new technologies and methodologies as the security landscape evolves. Strong attention to detail and a commitment to promoting a culture of security within the organization are essential traits for this role.