DevSecOps Engineer (Remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker CA, so some details may not match this job. The employer's own page has the real description.

Overview

The DevSecOps Engineer at RemoteWorker CA plays a pivotal role in integrating security practices within the DevOps process. This position demands a proactive approach to manage and enhance the security posture of software development and deployment processes. The ideal candidate will work collaboratively with cross-functional teams to incorporate security throughout the application lifecycle, ensuring the organization's applications are secure and compliant with industry standards. The role requires both technical expertise and the ability to mentor and guide team members on best practices in security and DevOps methodologies.

Job Responsibilities

• Implement security automation tools to enhance security integration into the DevOps pipeline.
• Conduct security assessments and vulnerability scans throughout all stages of software development.
• Develop and refine policies and procedures for software security compliance.
• Collaborate with development teams to design secure application architectures and enhance code security practices.
• Monitor applications and infrastructure for security threats and coordinate response actions.
• Provide training and awareness on security practices to technical teams and stakeholders.
• Stay updated with the latest security trends, vulnerabilities, and regulatory compliance requirements.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• 3+ years of experience in a DevOps or SecOps role, with a strong focus on security practices.
• Demonstrated experience with security tools (e.g., SAST, DAST, end-point protection).
• Proficient in programming/scripting languages such as Python, Ruby, or Java.
• Strong knowledge of CI/CD tools and architectural patterns for secure application development.
• Certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or similar are preferred.
• Excellent troubleshooting, analytical, and problem-solving skills.

Technologies & Tools

As a DevSecOps Engineer, you will engage with a variety of technologies and tools essential for maintaining security throughout the DevOps pipeline. This includes utilizing automation and orchestration tools like Jenkins and Kubernetes, security scanning tools such as Fortify, and cloud platforms like AWS or Azure. Familiarity with infrastructure as code (IaC) tools, such as Terraform or Ansible, will also be critical for managing secure configurations across development and operational environments.

Ideal Candidates

The ideal candidate for the DevSecOps Engineer position possesses a strong blend of technical acumen, problem-solving abilities, and a passion for security. They are collaborative team players who communicate effectively with both technical and non-technical stakeholders. Having a strong desire to stay abreast of evolving technology trends alongside a proactive mindset in identifying security vulnerabilities will greatly contribute to their success in this role. A commitment to best practices in security and a willingness to mentor others enhance their suitability for this dynamic and impactful position.