DevSecOps Engineer (Remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Cambridge Technology (CT), so some details may not match this job. The employer's own page has the real description.

Job Overview

Cambridge Technology (CT) is seeking a skilled DevSecOps Engineer to enhance our software development life cycle by integrating security practices into our operational process. This role is designed for a proactive individual who can collaborate with multiple teams to ensure that security protocols are maintained throughout the development phases. The ideal candidate will be responsible for establishing security measures, automating security testing, and fostering a culture of security awareness across the organization.

Job Responsibilities

• Design and implement secure CI/CD pipelines that incorporate testing and security checks.
• Collaborate with development, QA, and operations teams to integrate security practices early in the software development lifecycle.
• Conduct security assessments and threat modeling to identify vulnerabilities in applications.
• Automate security testing frameworks and integrate them into the build processes.
• Monitor and respond to security incidents, advising teams on remediation strategies.
• Develop and maintain documentation related to security protocols and best practices.
• Stay updated on the latest security threats and technologies to enhance the organization's security posture.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.
• Proven experience as a DevSecOps Engineer or similar role.
• Strong understanding of security protocols, vulnerabilities, and mitigation strategies.
• Experience with cloud platforms such as AWS, Azure, or Google Cloud.
• Proficiency in scripting languages, including Python, Bash, or PowerShell.
• Familiarity with infrastructure as code tools like Terraform or CloudFormation.
• Knowledge of containerization and orchestration technologies, particularly Docker and Kubernetes.

Technologies & Tools

The DevSecOps Engineer will primarily work with modern tools and technologies including cloud services such as Amazon Web Services (AWS) and Microsoft Azure, security scanning tools like Snyk and Aqua Security, CI/CD automation tools like Jenkins and GitLab CI, as well as configuration management tools like Ansible and Puppet. Familiarity with monitoring and logging tools such as Splunk or ELK Stack is also essential for maintaining system security.

Ideal Candidates

The ideal candidate for the DevSecOps Engineer position at Cambridge Technology embodies a proactive and innovative mindset, with a passion for security and reliability in software development. They should possess strong analytical and problem-solving skills, be comfortable working in a collaborative environment, and demonstrate the ability to communicate complex concepts clearly to both technical and non-technical audiences. A detail-oriented individual who stays abreast of evolving security threats and industry best practices will excel in this role.