DevSecOps Engineer (Remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker US, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer at RemoteWorker US will be responsible for integrating security practices into the DevOps development lifecycle. This role involves collaborating with development, operations, and security teams to enhance and automate security protocols, ensuring a secure software environment. The DevSecOps Engineer will implement security measures throughout the software development process and work to optimize performance, reliability, and security compliance of our applications and infrastructure.

Job Responsibilities

• Implement security best practices and tools throughout the software development lifecycle.
• Collaborate with cross-functional teams to define and establish security policies and protocols.
• Conduct security assessments, vulnerability scanning, and penetration testing on applications and infrastructure.
• Automate security processes to enhance efficiency and responsiveness in the development workflow.
• Monitor and address security incidents in real-time, ensuring rapid response to potential threats.
• Provide training and support to development and operations teams regarding security practices.
• Review code and configurations for security vulnerabilities and recommend appropriate solutions.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• A minimum of 3 years of experience in DevOps and security engineering roles.
• Proficient in scripting languages such as Python, Bash, or Ruby.
• Strong understanding of CI/CD pipelines and experience with tools like Jenkins, GitLab CI, or CircleCI.
• Experience with containerization tools such as Docker and Kubernetes.
• Familiarity with cloud environments (AWS, Azure, or Google Cloud Platform) and associated security practices.
• Knowledge of security frameworks and compliance standards (e.g., OWASP, NIST, ISO 27001).
• Demonstrated problem-solving skills and the ability to work effectively in a remote environment.

Technologies & Tools

The DevSecOps Engineer will utilize an array of technologies and tools including, but not limited to, Jenkins for CI/CD pipelines, Docker for containerization, Kubernetes for orchestration, AWS or Azure for cloud services, Fortify or Snyk for vulnerability management, and HashiCorp Terraform for infrastructure as code. Familiarity with security tools like Splunk for monitoring and alerting will also be required to maintain a robust security posture throughout the development lifecycle.

Ideal Candidates

The ideal candidate for the DevSecOps Engineer role will possess a strong analytical mindset, a proactive approach to security, and a passion for continuous learning. Candidates should be effective communicators, capable of articulating complex security concepts to technical and non-technical stakeholders alike. A collaborative spirit is essential, as the successful individual will work closely with various teams to foster a culture of security awareness. Previous experience in agile environments will also enhance their alignment with our methodologies and practices.