Devsecops Engineer-Remote

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Dice, so some details may not match this job. The employer's own page has the real description.

Overview

The DevSecOps Engineer at Dice will be responsible for integrating security practices into the DevOps process. This role requires a solid understanding of security best practices along with a strong background in software development and systems operations. The selected candidate will work collaboratively with cross-functional teams to automate security testing, develop security tools, and ensure compliance with industry regulations while enhancing the overall security posture of our applications and infrastructure.

Job Responsibilities

• Design, implement, and manage security tools and practices throughout the DevOps lifecycle.
• Conduct regular security assessments of application code, infrastructure, and CI/CD pipelines.
• Collaborate with development teams to integrate security into the software development lifecycle.
• Automate security testing and monitoring processes within production and development environments.
• Stay up-to-date with the latest security trends, threats, and technology solutions.
• Develop training materials and conduct workshops for developers on secure coding practices.
• Document security policies and procedures, and ensure compliance with industry regulations.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• 3+ years of experience in DevOps, software development, or IT security roles.
• Strong knowledge of security methodologies, frameworks, and compliance standards (e.g., NIST, OWASP).
• Experience with cloud platforms (AWS, Azure, GCP) and container-based architectures (Docker, Kubernetes).
• Proficiency in scripting languages such as Python, Bash, or similar.
• Familiarity with CI/CD tools such as Jenkins, GitLab CI, or similar.
• Certifications such as CISSP, CISM, or CRISC are a plus.

Technologies & Tools

The DevSecOps Engineer will utilize a variety of technologies and tools to enhance security across the software development lifecycle. Key tools may include security scanning tools (such as Snyk, SonarQube), CI/CD platforms (like Jenkins and GitLab CI), cloud services (AWS, Azure), and configuration management tools (such as Terraform and Ansible). Familiarity with container orchestration tools like Kubernetes will also be critical to maintain secure deployments in cloud environments.

Ideal Candidates

Ideal candidates for the DevSecOps Engineer role will possess a proactive and analytical mindset with a keen attention to detail. They should demonstrate excellent problem-solving skills and a passion for security in technology. Strong communication and collaboration skills are essential, allowing them to work effectively across teams. A commitment to continuous improvement and staying informed on emerging security threats and technologies is crucial to ensure the safety and efficacy of our applications and infrastructure.