DevSecOps Engineer--Remote

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Avance Consulting, so some details may not match this job. The employer's own page has the real description.

Job Overview

Avance Consulting is seeking a dedicated and skilled DevSecOps Engineer to join our dynamic team in a fully remote capacity. The ideal candidate will be responsible for integrating security practices within the DevOps process, ensuring that our applications adhere to security standards while maintaining seamless deployment workflows. This role requires collaboration with development and operational teams to enhance the security posture of our software development lifecycle (SDLC) through the adoption of automated security tools and practices.

Job Responsibilities

• Implement and maintain security within the CI/CD pipeline to ensure that security vulnerabilities are identified and mitigated early in the development process.
• Collaborate with development and operations teams to design and implement secure cloud architecture.
• Conduct security assessments, vulnerability scans, and penetration testing on applications and infrastructure.
• Develop and maintain security policies, procedures, and standards in alignment with industry best practices.
• Provide training and support to development and operational teams regarding secure coding and operational practices.
• Monitor and respond to security incidents, ensuring swift remediation of vulnerabilities and incidents.
• Stay updated with the latest in security threats, vulnerabilities, and compliance regulations and make recommendations for improvements.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Proven experience in DevSecOps, DevOps, or similar roles.
• Strong understanding of CI/CD processes and tools, such as Jenkins, GitLab CI, or CircleCI.
• Familiarity with security frameworks and compliance standards (e.g., OWASP, NIST, ISO 27001).
• Experience with cloud services (AWS, Azure, GCP) and containerization technologies (Docker, Kubernetes).
• Solid scripting or programming experience with languages such as Python, Bash, or Ruby.
• Excellent problem-solving skills and ability to work both independently and in a team environment.

Technologies & Tools

The DevSecOps Engineer will utilize a variety of technologies and tools essential for effective security integration in the development process, including but not limited to security scanning tools (like Snyk and Veracode), source code management tools (such as Git), CI/CD platforms (including Jenkins and CircleCI), cloud service platforms (like AWS, Azure, or GCP), container orchestration tools (such as Kubernetes), and infrastructure as code (IaC) technologies (like Terraform and Ansible).

Ideal Candidates

The ideal candidate for this position is someone who possesses a proactive mindset towards security, coupled with a robust technical background. They should demonstrate strong analytical skills and an eagerness to continuously enhance their knowledge in both security and software development practices. Team players who can effectively communicate complex security concepts to non-technical teammates and who thrive in a fast-paced, evolving technical environment will excel in this role. A commitment to best practices and a passion for innovation are also key traits that would make a candidate stand out.