DevSecOps Engineer - REMOTE

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker CA, so some details may not match this job. The employer's own page has the real description.

Overview

The DevSecOps Engineer at RemoteWorker CA plays a crucial role in integrating security practices within the DevOps process. This position emphasizes the need for security to be a foundational component of the development pipeline, ensuring that security is embedded from the earliest stages of software development through to deployment and operations. The successful candidate will collaborate with cross-functional teams to enhance security posture, automate security processes, and validate security requirements throughout the software development lifecycle.

Job Responsibilities

• Design, implement, and manage CI/CD pipelines with integrated security measures.
• Collaborate with development and operations teams to ensure security best practices are adhered to.
• Conduct security assessments and audits of current applications, systems, and network infrastructures.
• Monitor and analyze security incidents, vulnerabilities, and breaches to provide timely remediation.
• Automate security testing processes by utilizing appropriate tools and methodologies.
• Develop and maintain security documentation, including policies, standards, and procedures.
• Provide training and support for development teams on secure coding practices and tools.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Minimum of 3 years of experience in DevOps or a related role with a focus on security.
• Strong knowledge of security tools, practices, and frameworks (e.g., OWASP, NIST, ISO 27001).
• Proficiency in scripting languages such as Python, Bash, or Ruby.
• Experience with cloud platforms (e.g., AWS, Azure, or Google Cloud) and their security features.
• Hands-on experience with CI/CD tools (e.g., Jenkins, GitLab CI, or CircleCI).
• Familiarity with containerization and orchestration technologies such as Docker and Kubernetes.
• Relevant security certifications (e.g., CISSP, CEH, or CISM) are a plus.

Technologies & Tools

The DevSecOps Engineer will work extensively with a variety of technologies and tools essential for automation and security within the development lifecycle. Key tools include continuous integration and delivery platforms like Jenkins and GitLab, security scanning tools such as Snyk and Aqua, container orchestration systems like Kubernetes, and cloud service provider interfaces (AWS, Azure, Google Cloud Platform). Experience with Infrastructure as Code (IaC) tools such as Terraform or Ansible is also crucial for this role. Knowledge of various programming and scripting languages will support the automation of security checks within workflows.

Ideal Candidates

Ideal candidates for the DevSecOps Engineer position will possess a blend of strong technical skills and a proactive mindset regarding security practices. They should demonstrate excellent communication skills, allowing them to effectively collaborate with diverse teams and convey complex security concepts clearly. A passion for continuous learning and keeping abreast of the latest security trends, tools, and vulnerabilities is essential. In addition, candidates must exhibit problem-solving abilities, attention to detail, and a commitment to integrating security throughout all phases of software development.