DevSecOps Engineer (REMOTE)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Belcan, so some details may not match this job. The employer's own page has the real description.

Job Overview

As a DevSecOps Engineer at Belcan, you will be responsible for integrating security practices within the DevOps process. You will work collaboratively with cross-functional teams to ensure security is seamlessly woven into the CI/CD pipeline, application development, and operational workflows. Your expertise will be crucial in automating security testing, performing vulnerability assessments, and aiding in the swift resolution of security incidents, all while promoting a culture of security awareness and best practices within the organization.

Job Responsibilities

• Integrate security into the DevOps pipeline, ensuring continuous security validation and compliance.
• Develop and maintain security automation tools and practices for CI/CD processes.
• Perform comprehensive vulnerability assessments and penetration testing on applications and infrastructure.
• Work collaboratively with development teams to identify and address security vulnerabilities early in the development cycle.
• Monitor security events and incidents, providing timely incident response and root cause analysis.
• Conduct security training and awareness programs for team members and stakeholders.
• Stay informed on security trends, threats, and mitigation strategies to keep the organization secure.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Minimum of 3 years of experience in a DevOps or SecOps role.
• Strong knowledge of security best practices, vulnerability management, and threat modeling.
• Proficiency in automation and scripting languages (e.g., Python, Bash, Ruby).
• Experience with CI/CD tools such as Jenkins, GitLab, or CircleCI.
• Familiarity with network and application security tools, such as firewalls, IDS/IPS, and vulnerability scanners.
• Relevant certifications (e.g., CISSP, CEH, CISM, AWS Certified Security) are a plus.

Technologies & Tools

The DevSecOps Engineer will utilize a variety of technologies and tools, including but not limited to version control systems (e.g., Git), CI/CD tools (e.g., Jenkins, GitLab), containerization technologies (e.g., Docker, Kubernetes), and security assessment tools (e.g., Snyk, OWASP ZAP). Proficiency in cloud platforms such as AWS, Azure, or Google Cloud is advantageous, along with familiarity with logging and monitoring tools (e.g., Splunk, ELK stack).

Ideal Candidates

Ideal candidates for the DevSecOps Engineer position will possess a blend of technical expertise and a proactive approach to security. They will be problem solvers with strong analytical skills, capable of working under pressure and adapting to rapidly changing environments. Exceptional communication skills and the ability to collaborate effectively with both technical and non-technical stakeholders are essential. A passion for staying ahead of cybersecurity trends and a commitment to fostering a culture of security within the organizational processes will be key characteristics of a successful candidate.