DevSecOps Engineer (Remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker US, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer at RemoteWorker US will play a pivotal role in integrating security practices within the DevOps process. The successful candidate will collaborate closely with development, operations, and security teams to automate security controls, assess risk, and ensure compliance throughout the software development lifecycle. The role requires a proactive approach to identifying vulnerabilities and applying best security practices to enhance the organization's overall security posture while maintaining the efficiency of the development process.

Job Responsibilities

• Design and implement secure DevOps practices across the software lifecycle.
• Automate security testing and compliance checks within CI/CD pipelines.
• Work collaboratively with software developers to integrate security into the development process.
• Conduct security assessments and audits to identify vulnerabilities and risks.
• Monitor cloud infrastructure for security compliance and recommend necessary improvements.
• Facilitate incident response activities, including analysis and remediation of security breaches.
• Create and maintain documentation related to security policies, procedures, and controls.
• Provide training and guidance to development and operations teams on security best practices.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Minimum of 3 years of experience in a DevSecOps, security engineering, or related role.
• Strong understanding of security principles and best practices in software development.
• Proficiency in automation and configuration management tools (e.g., Terraform, Ansible).
• Experience with CI/CD tools (e.g., Jenkins, GitLab CI/CD, CircleCI).
• Familiarity with cloud platforms (e.g., AWS, Azure, Google Cloud) and their security features.
• Knowledge of scripting languages such as Python, Bash, or PowerShell.
• Certifications such as CISSP, CEH, or other relevant security certifications are preferable.

Technologies & Tools

The DevSecOps Engineer will utilize a range of technologies and tools integral to fostering secure software development practices, including but not limited to automation and orchestration tools such as Jenkins and Terraform, security scanning tools like Snyk and Checkmarx, and platforms for cloud deployment like AWS and Azure. Additionally, familiarity with containerization technologies like Docker and Kubernetes will be essential for effective security management in modern application environments.

Ideal Candidates

The ideal candidate for the DevSecOps Engineer position will possess a blend of technical expertise, analytical acumen, and collaborative spirit. They will be proactive, detail-oriented, and capable of navigating complex security challenges while fostering a culture of security-first thinking within their teams. Strong communication skills are crucial for translating security concepts to non-technical stakeholders, along with a commitment to continuous learning to stay ahead of evolving security threats and trends.