DevSecOps Engineer (Remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Piper Companies, so some details may not match this job. The employer's own page has the real description.

Job Overview

Piper Companies is seeking a highly skilled and passionate DevSecOps Engineer to join our dynamic team remotely. In this role, you will be responsible for implementing various security measures and practices throughout the development and operational lifecycle. You will collaborate with software engineers, system administrators, and other stakeholders to streamline software delivery while ensuring that security is prioritized and integrated at every stage. Your expertise will enhance our ability to deliver high-quality products rapidly while maintaining compliance and security standards.

Job Responsibilities

• Design and implement security frameworks in CI/CD pipelines to ensure adherence to security protocols.
• Conduct threat modeling and security assessments for applications, infrastructure, and operations.
• Collaborate with development teams to integrate security best practices into the software development lifecycle.
• Monitor and analyze security incidents, vulnerabilities, and compliance issues, proposing actionable remediation steps.
• Automate security tests and monitoring tools, ensuring consistent security checks throughout the development process.
• Stay updated on the latest security trends and technologies, recommending enhancements to existing processes and tools.
• Provide training and guidance to team members on secure coding practices and compliance requirements.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• A minimum of 3 years of experience in DevOps or SecOps roles, with a focus on security practices.
• Proficiency in scripting languages such as Python, Bash, or PowerShell.
• Strong knowledge of security standards like OWASP, NIST, and ISO 27001.
• Experience with CI/CD tools such as Jenkins, GitLab CI/CD, or CircleCI.
• Familiarity with cloud platforms (AWS, Azure, Google Cloud) and their security features.
• Certifications in security or cloud domains (CISSP, CISM, AWS Certified Security) are highly desirable.

Technologies & Tools

The DevSecOps Engineer will primarily work with a range of technologies that facilitate secure software development and delivery. Key technologies and tools include cloud platforms such as AWS and Azure, CI/CD tools like Jenkins and GitLab CI/CD, containerization tools such as Docker and Kubernetes, security assessment tools such as Snyk or Fortify, and IAM solutions tailored for cloud environments. Familiarity with Infrastructure as Code (IaC) tools like Terraform or Ansible will also be advantageous to automate environment provisioning and enforce security configurations.

Ideal Candidates

The ideal candidate for this position will possess a proactive and analytical mindset, demonstrating an ability to address complex security challenges in a rapidly changing environment. A strong commitment to collaboration and clear communication is essential, as the role requires interaction with various teams in the organization. Candidates should be adaptable, willing to learn new technologies, and able to work effectively in a remote work setting. A passion for security and an eagerness to stay updated on the latest trends and best practices in DevSecOps will set a successful candidate apart.