DevSecOps Engineer - Remote

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Dice, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer at Dice will be responsible for integrating security practices into the DevOps pipeline from the initial design phase to deployment and beyond. This role involves the implementation of security solutions, continuous monitoring, and collaboration with development and operations teams to ensure the security of applications and infrastructure. The ideal candidate will possess a robust understanding of both development and operational processes, along with a passion for security, enabling them to proactively identify vulnerabilities and implement effective measures to mitigate risks.

Job Responsibilities

• Design and implement security measures within the CI/CD pipeline.
• Conduct security assessments and penetration tests on applications and infrastructure.
• Collaborate with development and operations teams to identify and rectify security vulnerabilities.
• Automate security testing and compliance checks throughout the development cycle.
• Monitor system performance and respond to incidents, ensuring applications remain secure.
• Develop and maintain security policies, standards, and best practices.
• Provide training and guidance to development teams on secure coding practices.
• Stay up-to-date with the latest security trends, threats, and technology solutions.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Proven experience in DevSecOps practices, with a solid understanding of the SDLC.
• Strong knowledge of cloud platforms (AWS, Azure, or GCP) and containerization technologies (Docker, Kubernetes).
• Familiarity with security testing tools (e.g., Snyk, OWASP ZAP, Burp Suite).
• Experience with programming and scripting languages (Python, Bash, Java, etc.).
• Certifications such as Certified Information Systems Security Professional (CISSP) or Certified DevSecOps Professional (CDP) are advantageous.
• Excellent problem-solving skills and the ability to work independently as well as in a team.

Technologies & Tools

The DevSecOps Engineer will utilize a variety of technologies and tools, including but not limited to continuous integration/continuous deployment (CI/CD) platforms such as Jenkins or GitLab CI, configuration management tools such as Ansible or Puppet, security assessment tools, cloud service platforms like AWS and Azure, and container orchestration frameworks such as Kubernetes and Docker. Familiarity with these technologies is essential for executing security integrations seamlessly within the DevOps framework.

Ideal Candidates

The ideal candidates for this position are detail-oriented professionals who possess a strong security mindset and can effectively communicate security practices to both technical and non-technical team members. They have a proactive approach to problem-solving and the ability to adapt to changing technologies and methodologies in the fast-paced environment of DevSecOps. A collaborative spirit, combined with a commitment to continuous learning and improvement in security practices, will significantly contribute to their success in the role.