DevSecOps Engineer (Remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Minutes to Seconds, so some details may not match this job. The employer's own page has the real description.

Job Overview

As a DevSecOps Engineer at Minutes to Seconds, you will be at the forefront of integrating security practices into the entire software development lifecycle. You will work collaboratively with cross-functional teams to implement security best practices, automate security tools, and ensure compliance with regulations. Your expertise will be essential in identifying and mitigating security vulnerabilities while promoting a culture of security awareness within the organization. This role involves continuous improvement of processes and technologies to enhance our security posture in an agile development environment.

Job Responsibilities

• Integrate security measures into CI/CD pipelines to ensure secure code deployment.
• Conduct regular security assessments, vulnerability scans, and penetration testing.
• Collaborate with development and operations teams to define security requirements and best practices.
• Automate security processes and tools to enhance efficiency and reduce risk.
• Provide guidance and training on security protocols and standards to team members.
• Monitor and respond to security incidents, conducting root cause analysis and remediation.
• Maintain documentation of security policies, procedures, and compliance requirements.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 3-5 years of experience in DevSecOps, security engineering, or a related capacity.
• Strong understanding of secure coding practices and security testing methodologies.
• Proficiency in using security tools such as SAST, DAST, and IAST.
• Experience with cloud platforms (e.g., AWS, Azure, Google Cloud) and container orchestration (e.g., Docker, Kubernetes).
• Knowledge of security frameworks and compliance standards (e.g., OWASP, NIST, CIS).
• Excellent problem-solving skills and the ability to work collaboratively in a remote environment.

Technologies & Tools

The DevSecOps Engineer will work with a variety of technologies and tools, including but not limited to, AWS and Azure for cloud hosting, Docker and Kubernetes for container management, and Jenkins or GitLab CI for continuous integration/continuous deployment (CI/CD) pipelines. The role also involves the use of security-focused tools such as Snyk, SonarQube, and Fortify for static and dynamic application security testing. Familiarity with infrastructure as code (IaC) tools like Terraform or CloudFormation is also advantageous.

Ideal Candidates

Ideal candidates for this position are proactive and detail-oriented professionals who possess a passion for security and technology. They should thrive in a dynamic, collaborative environment and be enthusiastic about implementing innovative security solutions. Strong communication skills are essential, as the role requires regular interaction with various stakeholders. A continuous learner, the ideal candidate stays abreast of the latest security trends and practices, proactively identifying ways to enhance the organization’s security posture.