DevSecOps Engineer (Partially Remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker US, so some details may not match this job. The employer's own page has the real description.

Overview

The DevSecOps Engineer at RemoteWorker US will play a pivotal role in integrating security practices into the DevOps processes, ensuring that our development pipelines are secure, resilient, and compliant. This position is ideal for a candidate who can bridge the gap between development and security, applying best practices in security architecture while enhancing operational efficiency. The successful applicant will collaborate with cross-functional teams to foster a culture of security awareness and implement automation tools for seamless deployment and monitoring of applications.

Job Responsibilities

• Design and implement secure CI/CD pipelines incorporating security policies and procedures.
• Collaborate with development teams to integrate security measures into the software development lifecycle.
• Conduct security assessments, penetration testing, and vulnerability analyses on applications and infrastructure.
• Develop automated scripts and tools to facilitate security checks and compliance validation.
• Monitor and analyze security incidents and alerts to identify potential vulnerabilities.
• Provide training and guidance to development teams on secure coding practices.
• Stay updated on the latest security trends, threats, and technology innovations to continuously improve security posture.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 4+ years of experience in DevOps, security engineering, or a related field.
• Strong knowledge of security best practices for cloud environments (AWS, Azure, GCP).
• Experience with containerization technologies, such as Docker and Kubernetes.
• Proficiency in scripting languages (Python, Bash, etc.) for automation purposes.
• Understanding of regulatory compliance frameworks (e.g., ISO 27001, NIST, GDPR).
• Relevant certifications (e.g., CISSP, CISM, AWS Certified Security) are a plus.

Technologies & Tools

The DevSecOps Engineer will utilize various technologies and tools for effective security integration and automation. Key technologies include cloud service providers such as AWS, Azure, or Google Cloud Platform, along with tools like Jenkins for CI/CD, Terraform for infrastructure as code, Docker for containerization, and security scanning tools like Snyk and OWASP ZAP. Familiarity with monitoring tools such as Splunk or ELK Stack may also be required to provide insights into security events and system performance.

Ideal Candidates

The ideal candidate for this position is a proactive, detail-oriented professional who values collaboration and communication. They are passionate about security and possess a strong analytical mindset to evaluate complex systems and processes. Successful candidates demonstrate continuous initiative for improvement, adaptability in fast-paced environments, and a commitment to fostering a security-first mindset among peers. Strong problem-solving skills and the ability to work independently while ensuring high-quality results are essential traits for this role.