DevSecOps Engineer (Remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker US, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer at RemoteWorker US will play a critical role in integrating security practices into the DevOps process, ensuring that our deployment pipelines are secure and efficient. This position involves designing and implementing security measures across the development lifecycle, collaborating with various teams to enhance our infrastructure, and monitoring for vulnerabilities in our systems and applications. With a strong emphasis on automating security controls and configurations, the ideal candidate will leverage industry best practices to improve overall security posture and facilitate rapid delivery of applications while minimizing risks.

Job Responsibilities

• Implement and maintain security best practices within the CI/CD pipeline.
• Conduct regular security assessments, penetration tests, and vulnerability scanning.
• Develop and automate security tests to ensure compliance with security policies.
• Collaborate with development and operations teams to enhance security practices and integrate security tools.
• Monitor applications and systems for security breaches and incidents.
• Provide training and guidance to development teams on security-related topics.
• Maintain documentation of security protocols and processes as well as incident response plans.
• Stay current with emerging security threats and trends, adapting strategies accordingly.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 3 years of experience in DevSecOps, DevOps, or related fields.
• Strong understanding of security frameworks, tools, and compliance standards (e.g., NIST, OWASP, ISO 27001).
• Experience with security automation tools and CI/CD platforms.
• Proficient in programming and scripting languages such as Python, Bash, or JavaScript.
• Knowledge of cloud platforms (e.g., AWS, Azure, Google Cloud) and their security configurations.
• Certifications in security or DevOps (e.g., CISSP, CISM, AWS Certified DevOps Engineer) are a plus.

Technologies & Tools

The DevSecOps Engineer will utilize a variety of technologies and tools to carry out their responsibilities effectively. Key tools include CI/CD platforms such as Jenkins or GitLab CI, security scanning tools like Snyk or Aqua Security, containerization technologies like Docker and Kubernetes, as well as cloud infrastructure tools such as Terraform and Ansible. Familiarity with monitoring and logging tools like Splunk or ELK stack is also vital for tracking security events and managing incident response.

Ideal Candidates

The ideal candidate for the DevSecOps Engineer position at RemoteWorker US is someone who possesses a proactive approach to security and an unwavering commitment to quality. Strong analytical and problem-solving skills are essential, allowing for swift identification and mitigation of potential vulnerabilities. Excellent collaborative and communication abilities are vital in facilitating effective partnerships with various teams. A passion for continuous learning and an adaptive mindset in a rapidly evolving technological landscape are key attributes that will contribute to success in this role.