DevSecOps Engineer - REMOTE

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker US, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer at RemoteWorker US will play a critical role in bridging the gap between development, security, and operations. This position is pivotal to ensuring the secure delivery of software products through robust integration of security practices within the existing DevOps pipeline. The successful candidate will collaborate with cross-functional teams to embed security measures at every stage of the software lifecycle, conduct assessments, and mitigate vulnerabilities, ultimately fostering a culture of security awareness within the organization.

Job Responsibilities

• Implement and manage security tools and processes integrated within the CI/CD pipeline.
• Collaborate with development teams to design and build secure software applications.
• Conduct security assessments and code reviews to identify and mitigate vulnerabilities.
• Provide ongoing monitoring and reporting of security performance metrics.
• Assist in the development and implementation of security policies and standards.
• Coordinate incident response planning and execution in the event of a security breach.
• Educate team members on security best practices and promote a culture of security awareness.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or related field.
• At least 3+ years of experience in DevSecOps, DevOps, or related roles.
• Strong knowledge of cloud computing platforms such as AWS, Azure, or Google Cloud.
• Experience with CI/CD tools such as Jenkins, GitLab, or CircleCI.
• Proficiency in scripting languages such as Python, Bash, or Ruby.
• Familiarity with security frameworks and standards (e.g., OWASP, NIST, ISO 27001).
• Certification in security-related domains (e.g., CISSP, CISM, CEH) is desirable.

Technologies & Tools

The position utilizes a variety of technologies and tools designed to streamline and secure the software development lifecycle. Key technologies include cloud services like AWS and Azure, CI/CD tools such as Jenkins and GitLab, security scanning tools like SonarQube and Fortify, as well as configuration management tools such as Ansible or Terraform. Familiarity with containerization technologies, such as Docker and Kubernetes, will enhance the effectiveness of the role.

Ideal Candidates

Ideal candidates will possess a proactive approach to security and a strong desire to incorporate security best practices throughout the development process. They should demonstrate excellent problem-solving abilities and exhibit strong communication skills for interacting with technical teams and stakeholders. A commitment to continuous learning and adaptation in the fast-evolving technology landscape is essential, along with a genuine enthusiasm for creating secure and efficient software solutions.