DevSecOps Engineer (Remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Piper Companies, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer at Piper Companies will play a pivotal role in integrating security practices within the DevOps process, ensuring that security is an intrinsic element of our software development lifecycle. This position involves collaborating with development, operations, and security teams to automate security controls, manage risks, and enhance the overall security posture of our applications and infrastructure. The ideal candidate will be responsible for identifying vulnerabilities, remediating security issues, and facilitating a culture of security awareness throughout the organization.

Job Responsibilities

• Implement security measures across the DevOps pipeline to enhance application security.
• Design and automate security tools and processes to improve development efficiency.
• Conduct security assessments and audits of applications and infrastructure.
• Collaborate with development and operations teams to ensure secure coding practices.
• Monitor and respond to security incidents and breaches in a timely manner.
• Maintain up-to-date knowledge of the latest security technologies, trends, and regulations.
• Develop documentation related to security processes and compliance requirements.
• Facilitate security training and awareness programs for development and operations teams.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 3+ years of experience in DevSecOps, cybersecurity, or related roles.
• Proficient in security tools and practices within a CI/CD pipeline.
• Strong understanding of cloud infrastructure and security (AWS, Azure, GCP).
• Experience with containerization technologies (Docker, Kubernetes).
• Familiarity with programming and scripting languages such as Python, Bash, or Ruby.
• Relevant certifications such as CISSP, CISM, or DevSecOps certification are highly desirable.

Technologies & Tools

The DevSecOps Engineer will work with a variety of technologies and tools, including but not limited to cloud platforms such as AWS and Azure, continuous integration/continuous deployment (CI/CD) tools like Jenkins or GitLab CI, container management systems like Docker and Kubernetes, as well as security assessment tools such as Snyk, Aqua, and OWASP ZAP. Familiarity with Infrastructure as Code (IaC) tools such as Terraform and configuration management tools like Ansible will also be imperative to effectively streamline security practices within our development operations.

Ideal Candidates

The ideal candidate for the DevSecOps Engineer position is someone who embodies a strong commitment to security in a fast-paced development environment. They should possess a collaborative spirit, demonstrating the ability to effectively communicate with diverse teams and foster an environment of teamwork and shared goals. Additionally, a proactive mindset towards problem-solving, a passion for continuous improvement, and the adaptability to embrace new technologies are essential attributes that will contribute to their success in this role.