DevSecOps Engineer - Remote

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by CyberCoders, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer at CyberCoders will play a pivotal role in advancing our security practices across the entire development lifecycle. This position is designed for a candidate who is well-versed in integrating security measures into the DevOps process, enhancing our cloud infrastructures, and implementing robust solutions that align with best practices. The successful individual will collaborate closely with development teams to ensure security considerations are integrated into application design, deployment, and maintenance, ultimately helping to protect our systems from vulnerabilities and threats.

Job Responsibilities

• Integrate security tools and practices into CI/CD pipelines to automate security checks.
• Conduct threat modeling and risk assessments for applications and infrastructure.
• Collaborate with development, operations, and security teams to foster a culture of security awareness and best practices.
• Monitor and respond to security incidents, ensuring timely resolution and documentation.
• Implement and manage security controls and compliance requirements for cloud-based environments.
• Provide guidance on secure coding practices and contribute to secure software development lifecycle.
• Continuously evaluate and enhance security solutions and tools based on evolving threats.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field, or equivalent practical experience.
• 3+ years of experience in DevOps, SecOps, or a related field with a solid understanding of security principles and practices.
• Proficiency in scripting and programming languages such as Python, Bash, or Ruby.
• Experience with CI/CD tools such as Jenkins, GitLab CI, or CircleCI, and integrating security tools within them.
• Strong knowledge of cloud platforms (AWS, Azure, or Google Cloud) and associated security practices.
• Familiarity with containerization and orchestration technologies like Docker and Kubernetes.
• Certifications such as CISSP, CISM, or other security-related credentials are a plus.

Technologies & Tools

In this position, the DevSecOps Engineer will utilize a variety of technologies and tools that support both development and security activities. These include cloud service providers such as AWS or Azure, CI/CD platforms like Jenkins and GitLab, containerization technologies including Docker and Kubernetes, and security tools such as Snyk, Nessus, and OWASP ZAP. Familiarity with infrastructure as code (IaC) tools like Terraform and configuration management tools such as Ansible or Puppet will also be valuable in this role.

Ideal Candidates

The ideal candidates for the DevSecOps Engineer position will exhibit strong analytical and problem-solving skills, with a keen attention to detail and the ability to think strategically about security in the development process. They should have excellent interpersonal skills to promote collaboration across teams and inspire others to prioritize security. A proactive approach to learning about new security threats and tools, along with a commitment to best practices and continuous improvement, will also characterize a successful candidate in this position.