DevSecOps Engineer (Remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker CA, so some details may not match this job. The employer's own page has the real description.

Overview

As a DevSecOps Engineer at RemoteWorker CA, you will play a critical role in integrating security practices within the DevOps process. Your primary responsibility will be to enhance the security of our software development lifecycle by automating security testing and ensuring compliance with security best practices. You will collaborate with cross-functional teams, implement security tools and practices, and proactively monitor and address vulnerabilities throughout our applications. Your expertise will contribute to creating a secure, resilient, and efficient software delivery pipeline, ensuring that security remains a top priority at every stage of development.

Job Responsibilities

• Develop and maintain security solutions in CI/CD pipelines to automate security testing.
• Collaborate with development teams to integrate security measures from the design phase through deployment.
• Conduct vulnerability assessments and penetration tests on applications and infrastructure.
• Monitor security tools and dashboards to detect and respond to potential security incidents.
• Provide guidance and training for development teams on secure coding practices and compliance requirements.
• Implement and manage security architectures, including firewalls, intrusion detection systems, and identity management solutions.
• Stay current with security trends and provide recommendations for improvements to the security posture of our systems.
• Document security processes and create reports for audits and compliance reviews.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 3+ years of experience in DevSecOps or a related security role.
• Strong understanding of secure software development lifecycle (SDLC) practices.
• Proficiency in programming languages such as Python, Java, or Go.
• Experience with security automation tools such as Snyk, Aqua Security, or Prisma Cloud.
• Familiarity with common security frameworks (e.g., NIST, ISO 27001, OWASP).
• Knowledge of cloud platforms such as AWS, Azure, or Google Cloud.
• Excellent problem-solving skills and attention to detail.

Technologies & Tools

The DevSecOps Engineer position utilizes a variety of technologies and tools essential for ensuring security within our DevOps processes. You will work with CI/CD tools such as Jenkins, GitLab CI, and CircleCI, as well as containerization platforms like Docker and Kubernetes. Security tools for vulnerability assessment, such as Nessus and OWASP ZAP, will also be employed. Familiarity with configuration management tools like Ansible, Puppet, or Chef, as well as cloud security solutions, will be crucial for this role.

Ideal Candidates

The ideal candidate for the DevSecOps Engineer position is someone who exhibits a proactive and team-oriented mindset. They should possess a strong passion for cybersecurity and demonstrate critical thinking abilities to identify potential risks and devise appropriate solutions. A commitment to continuous improvement and the ability to adapt quickly to changing technology landscapes are essential. Candidates should also have a collaborative spirit, with excellent communication skills to convey security concepts effectively to both technical and non-technical audiences.