DevSecOps Engineer (Remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Piper Companies, so some details may not match this job. The employer's own page has the real description.

Overview

Piper Companies is seeking a highly skilled and motivated DevSecOps Engineer to join our innovative team in a fully remote capacity. The successful candidate will be responsible for integrating security practices within the DevOps framework, ensuring that security is a fundamental part of the software development lifecycle. This position will involve collaboration with various teams to design, implement, and maintain security measures, automate processes, and enhance overall operational efficiency while safeguarding the organization from potential threats.

Job Responsibilities

• Design and implement security strategies and tools within the software development lifecycle.
• Collaborate with development teams to integrate security best practices and promote a "security-first" culture.
• Automate security testing and compliance checks as part of continuous integration and deployment pipelines.
• Conduct vulnerability assessments and penetration testing to identify potential security risks.
• Monitor and respond to security incidents in a timely manner, maintaining incident response plans.
• Stay updated with the latest security trends and emerging threats to enhance organizational security posture.
• Provide guidance and mentorship on security awareness and training for development teams.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• 4+ years of experience in DevOps or SecOps roles with a strong focus on security.
• Proficient in security frameworks such as OWASP, NIST, or ISO 27001.
• Experience with CI/CD tools like Jenkins, GitLab, or similar.
• Strong understanding of cloud security within AWS, Azure, or Google Cloud Platform environments.
• Hands-on experience with container security using Docker and Kubernetes.
• Familiarity with security tools such as SIEM, IDS/IPS, and vulnerability scanners.
• Excellent communication skills with the ability to collaborate effectively with cross-functional teams.

Technologies & Tools

In this position, the DevSecOps Engineer will work with various technologies and tools including but not limited to cloud services (AWS, Azure), CI/CD platforms (Jenkins, GitLab), containerization tools (Docker, Kubernetes), security tools (Fortify, Nessus, Splunk), and scripting languages (Python, Bash). Familiarity with infrastructure-as-code principles using Terraform or CloudFormation is also desirable to facilitate an automated and efficient operational environment.

Ideal Candidates

The ideal candidate for the DevSecOps Engineer position is one who possesses a proactive approach to problem-solving and demonstrates a strong sense of ownership over security practices. They should be detail-oriented with exceptional analytical skills, allowing them to identify risks and implement effective solutions. A collaborative mindset is essential, as the candidate will work closely with various departments. Passionate about security, the ideal candidate should also have a strong desire to learn and adapt to new challenges in an ever-evolving technology landscape.