DevSecOps Engineer (NO C2C) - Remote | WFH

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Get It Recruit - Information Technology, so some details may not match this job. The employer's own page has the real description.

Overview

The DevSecOps Engineer at Get It Recruit - Information Technology will play a crucial role in integrating security practices across the DevOps lifecycle. This position focuses on continuous security assessment for both infrastructure and applications, while fostering a culture of security awareness among teams. The successful candidate will work collaboratively with software developers, IT professionals, and security teams to design and implement robust security frameworks, ensuring that security is embedded at every stage of the development process.

Job Responsibilities

• Implement and maintain security practices in the CI/CD pipeline.
• Conduct security assessments and vulnerability scans on applications and infrastructure.
• Collaborate with development and operations teams to remediate identified vulnerabilities.
• Automate security tasks to ensure efficient delivery of secure software.
• Develop and document security policies, procedures, and best practices.
• Monitor security alerts and respond to incidents in a timely manner.
• Provide security training and awareness to team members.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• 3+ years of experience in DevSecOps, Cloud Security, or a related area.
• Strong knowledge of security principles, practices, and tools.
• Experience with CI/CD tools such as Jenkins, GitLab, or similar.
• Proficiency in scripting languages (e.g., Python, Bash).
• Familiarity with cloud service providers (AWS, Azure, GCP) and their security offerings.
• Relevant security certifications (CISSP, CEH, or similar) are a plus.

Technologies & Tools

The DevSecOps Engineer will work with various technologies and tools, including but not limited to: AWS, Azure, Jenkins, Docker, Kubernetes, Terraform, security assessment tools such as Snyk, and vulnerability scanning tools such as Nessus and Qualys. Familiarity with Infrastructure as Code (IaC) methodologies is essential for automating security controls effectively within cloud environments.

Ideal Candidates

The ideal candidate excels in a dynamic environment and possesses a strong passion for integrating security into the software development lifecycle. They are proactive in identifying potential security issues and solving them efficiently. Excellent communication skills and the ability to work collaboratively across teams are crucial. Additionally, a strong commitment to continuous learning and staying updated on the latest security trends will greatly contribute to the success of this role.