DevSecOps Engineer (REMOTE)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Koniag Government Services, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer at Koniag Government Services will play a pivotal role in integrating security practices into the DevOps process, ensuring that security is not only a consideration, but a critical component of the software development lifecycle. This role involves collaborating with development and operations teams to implement security measures, automate security testing, and monitor applications and infrastructure for vulnerabilities. You will be responsible for designing secure coding practices, conducting security assessments, and guiding teams on compliance requirements to enhance the overall security posture of the organization.

Job Responsibilities

• Integrate security in the software development lifecycle and across CI/CD pipelines.
• Perform threat modeling and vulnerability assessments to identify and remediate security threats.
• Automate security testing processes within development workflows.
• Collaborate with development teams to enforce secure coding practices.
• Implement and manage security tooling and technologies across the DevOps environment.
• Conduct security training and awareness programs for development and operations teams.
• Monitor and respond to security incidents, ensuring compliance with security policies.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 3 years of experience in a DevSecOps role or similar positions.
• Strong understanding of DevOps principles and practices.
• Proficiency with security tools such as SAST, DAST, IAST, and container security solutions.
• Experience with CI/CD tools like Jenkins, GitLab, or similar technologies.
• Knowledge of programming and scripting languages such as Python, Bash, or PowerShell.
• Familiarity with cloud platforms (AWS, Azure, Google Cloud) and security practices.
• Relevant security certifications such as CISSP, CEH, or Security+ are preferred.

Technologies & Tools

The DevSecOps Engineer will utilize a variety of technologies and tools to maintain security within the development processes. These include CI/CD platforms such as Jenkins and GitLab, security scanning tools like Snyk or Fortify, configuration management tools like Ansible or Terraform, and cloud security platforms tailored to either AWS or Azure environments. Familiarity with container orchestration tools like Kubernetes may also be required.

Ideal Candidates

The ideal candidate for this role will possess a proactive mindset towards security and a passion for enhancing software reliability through secure practices. Strong analytical and problem-solving skills are essential, coupled with the ability to work collaboratively across cross-functional teams. A measurable enthusiasm for keeping abreast of the latest security trends and technologies will set you apart. Additionally, effective communication skills are crucial for educating teams about security protocols and promoting a culture of security awareness throughout the organization.