DevSecOps Engineer (Remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by SAGE Dining Services, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer at SAGE Dining Services plays a crucial role in integrating security practices within the DevOps process. This position is responsible for ensuring that security is a foundational element throughout the development lifecycle, from initial design through integration, testing, deployment, and software delivery. The engineer will collaborate with cross-functional teams to advance security compliance standards, automate security checks, and foster a culture of security awareness across the organization.

Job Responsibilities

• Develop and implement security policies, procedures, and standards across the software development lifecycle.
• Integrate security tools into CI/CD pipelines to automate security checks throughout the deployment process.
• Conduct regular security assessments and vulnerability scans to identify and remediate potential threats.
• Collaborate with development, QA, and operations teams to ensure secure coding practices are adhered to.
• Provide expertise in security architecture, design, and implementation for applications and infrastructure.
• Monitor and respond to security incidents, conducting root cause analysis and remediation efforts.
• Facilitate security training sessions and workshops to enhance the security knowledge of team members.
• Stay current with emerging security threats and technologies, ensuring that SAGE Dining Services adopts appropriate measures.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• 3+ years of experience in DevSecOps, application security, or a related area.
• Strong knowledge of DevOps practices, CI/CD principles, and containerization technologies (e.g., Docker, Kubernetes).
• Proficiency in scripting and programming languages such as Python, Bash, or Java.
• Experience with web application security testing tools (e.g., OWASP ZAP, Burp Suite).
• Familiarity with cloud platforms (e.g., AWS, Azure) and their security configurations.
• Relevant security certifications (e.g., CISSP, CISM, CEH) are a plus.
• Excellent analytical and problem-solving skills with a keen attention to detail.

Technologies & Tools

The DevSecOps Engineer will utilize a variety of technologies and tools to enhance the security posture of applications and infrastructure. Key tools include security automation tools such as Jenkins and GitLab for CI/CD processes, containerization platforms like Docker and Kubernetes, vulnerability management systems such as Nessus and Qualys, and cloud security services associated with AWS and Azure environments. Proficiency in version control systems like Git is also essential.

Ideal Candidates

Ideal candidates for the DevSecOps Engineer position possess a proactive mindset and demonstrate a strong commitment to embedding security within the software development process. They are adaptable and able to thrive in dynamic environments, showcasing effective communication skills to collaborate with various stakeholders. Characteristics such as attention to detail, a passion for continuous learning, and a collaborative spirit will further enhance their fit within SAGE Dining Services and contribute to the overall success of our DevSecOps initiatives.