DevSecOps Engineer (Remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker US, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer at RemoteWorker US will play a crucial role in integrating security practices into the DevOps process, ensuring that security is considered at every stage of the software development lifecycle. This position involves collaborating with cross-functional teams to deliver high-quality, secure software solutions, implementing automated security scanning, and promoting a culture of security awareness across the organization. The ideal candidate will be expected to leverage their expertise in secure development practices and tools to enhance overall security posture while maintaining agility in software delivery.

Job Responsibilities

• Integrate security practices and tools within the DevOps pipeline to enhance software security.
• Conduct security assessments, including threat modeling and vulnerability analysis, on applications and infrastructure.
• Automate security validation in CI/CD processes to ensure compliance and security are prioritized.
• Collaborate with development, operations, and security teams to foster a security-first culture and ensure best practices.
• Stay current with security trends, threats, and technology advancements to proactively mitigate risks.
• Provide guidance on secure coding practices and assist teams in implementing them effectively.
• Use metrics and reporting to communicate security postures and recommend improvements.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Proven experience in a DevSecOps role or similar position, with a focus on continuous integration and continuous delivery (CI/CD) practices.
• Strong knowledge of security best practices, secure coding practices, and compliance standards such as PCI-DSS, GDPR, etc.
• Experience with security tools for scanning, testing, and monitoring, such as SAST, DAST, and SCA tools.
• Familiarity with cloud environments (AWS, Azure, GCP) and container-based technologies (Docker, Kubernetes) is preferred.
• Proficient in scripting and automation languages such as Python, Bash, or PowerShell.
• Strong analytical and problem-solving skills with attention to detail.

Technologies & Tools

The DevSecOps Engineer will utilize a range of technologies and tools to facilitate secure software delivery. Key tools include CI/CD platforms such as Jenkins or GitLab, security scanning tools like SonarQube, Aqua Security, and OWASP ZAP. Knowledge of configuration management tools (e.g., Ansible, Terraform) and source control platforms (e.g., Git, Bitbucket) will also be essential. Familiarity with cloud services (AWS, Azure) and container orchestration solutions (e.g., Kubernetes) will greatly enhance the automation of security functions.

Ideal Candidates

The ideal candidates for the DevSecOps Engineer position will possess a proactive mindset, emphasizing collaboration, innovation, and a commitment to security excellence. They will demonstrate strong communication skills, enabling them to engage effectively with diverse teams and stakeholders. A passion for continuous learning and staying abreast of technological advancements is vital, as is the ability to thrive in a fast-paced, remote work environment. Candidates who approach challenges with creativity and resilience will find themselves well-suited for this role.