DevSecOps Engineer - Long term REMOTE Contract - Professional Services experienced

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Calabria Group: Innovation Technology Delivery, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer at Calabria Group: Innovation Technology Delivery will play a crucial role in integrating security practices into the DevOps processes. This position emphasizes the importance of security at every stage of the development lifecycle, guiding teams in implementing best practices and tools to ensure the delivery of secure software. The engineer will collaborate with development, operations, and security teams to enhance the organization's security posture, evaluate vulnerabilities, and establish automated security processes to bolster existing workflows.

Job Responsibilities

• Design and implement security measures throughout the DevOps pipeline.
• Conduct regular security assessments and vulnerability scans to identify weaknesses.
• Collaborate with development teams to integrate security testing into CI/CD processes.
• Provide guidance and mentorship on secure coding practices.
• Monitor security events and incidents, responding to and mitigating breaches as necessary.
• Create and maintain security documentation and compliance reports.
• Stay updated on emerging security threats and industry trends, recommending improvements.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or related field.
• 5+ years of experience in DevOps engineering with a focus on security.
• Profound knowledge of security frameworks, standards, and best practices.
• Proficient in scripting languages such as Python, Bash, or Ruby.
• Experience with CI/CD tools such as Jenkins, GitLab, or similar.
• Familiarity with cloud security in platforms such as AWS, Azure, or Google Cloud.
• Certifications such as CISSP, CISM, or SANS GIAC are preferred.

Technologies & Tools

The DevSecOps Engineer will engage with a variety of technologies and tools essential for ensuring secure development practices. This includes cloud platforms such as AWS and Azure, CI/CD pipelines through Jenkins or GitLab, vulnerability management tools such as Snyk or Qualys, container security tools like Aqua Security or Twistlock, automated testing frameworks, and various monitoring tools including Splunk or ELK Stack. Familiarity with firewalls, intrusion detection systems, and security incident management systems will be beneficial.

Ideal Candidates

The ideal candidates for the DevSecOps Engineer position will possess a passionate, proactive attitude towards security and engineering. They should be excellent communicators, capable of effectively collaborating across multidisciplinary teams. Strong analytical skills to assess and mitigate risks, along with an unwavering commitment to continuous learning, are essential traits. Candidates who display adaptability and innovative thinking in the face of evolving challenges in security threats will excel in this role.