DevSecOps Engineer (Remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Dice, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer at Dice will play a pivotal role in enhancing our software development lifecycle by integrating security practices into the DevOps process. This position requires a proactive approach to ensure that software is built and released securely, leveraging automation tools and best practices. The ideal candidate will collaborate with development teams to design secure infrastructures, conduct vulnerability assessments, and implement continuous monitoring solutions. Ultimately, the goal is to foster a culture of security awareness while maintaining high software quality and operational efficiency.

Job Responsibilities

• Implement and manage security tools throughout the development lifecycle.
• Collaborate with cross-functional teams to design secure application architectures.
• Conduct vulnerability assessments, penetration testing, and security audits.
• Identify security weaknesses in current systems and recommend effective solutions.
• Automate security testing and compliance checks within CI/CD pipelines.
• Maintain documentation for security processes, incidents, and audits.
• Provide training and support to development teams on secure coding practices.
• Monitor security incidents and respond to breaches or anomalies promptly.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or related field.
• Proven experience as a DevSecOps Engineer or similar role.
• Deep understanding of security best practices for cloud and on-premise environments.
• Proficiency in programming languages such as Python, Java, or Go.
• Experience with infrastructure as code (IaC) tools such as Terraform or CloudFormation.
• Familiarity with containerization technologies, especially Docker and Kubernetes.
• Strong knowledge of DevOps practices, CI/CD pipelines, and relevant tools (Jenkins, GitLab, etc.).
• Certifications in security (CISSP, CEH, or similar) are a plus.

Technologies & Tools

The DevSecOps Engineer will work with a variety of technologies and tools, including but not limited to cloud platforms such as AWS, Azure, or Google Cloud. Familiarity with security tools like Snyk, Aqua Security, and OWASP ZAP will be essential. Additionally, the candidate will be expected to utilize CI/CD platforms like Jenkins or GitHub Actions, as well as configuration management tools such as Ansible or Puppet to automate application deployments and security checks.

Ideal Candidates

Ideal candidates for the DevSecOps Engineer position are individuals who are both analytical and creative, capable of thinking critically about security risks while embodying a solutions-oriented approach. They should possess excellent communication skills to effectively navigate across teams and foster a collaborative security culture. A strong passion for continuous learning and staying up-to-date with the latest industry trends and threats will greatly enhance their effectiveness in this role. Flexibility in adapting to new challenges and technologies is also crucial for success in a rapidly evolving tech landscape.