DevSecOps Engineer (Remote) - Security Clearance Required

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by ecocareers, so some details may not match this job. The employer's own page has the real description.

Overview

The DevSecOps Engineer plays a critical role in integrating security practices within the DevOps pipeline. This position involves collaboration with development, operations, and security teams to automate and enhance security throughout the application lifecycle. The successful candidate will ensure that security measures are embedded at every stage of development, from design through to deployment, fostering a culture of security-first thinking while complying with established security protocols and standards. This role requires a strong understanding of both security operations and software development to effectively mitigate risks while delivering high-quality software products.

Job Responsibilities

• Develop and implement security policies, procedures, and guidelines that are in compliance with organizational standards.
• Integrate security into the DevOps process to enable continuous security and compliance checks.
• Collaborate with software development teams to conduct threat modeling and risk assessment.
• Automate security testing and continuous monitoring in CI/CD pipelines.
• Provide incident response, vulnerability management, and remediation efforts in accordance with best practices.
• Conduct security trainings and awareness programs for development and operational teams.
• Maintain and improve security tools and technologies to enhance security posture.
• Stay current with emerging security risks and technologies to provide effective solutions to mitigate them.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 3 years of experience in DevSecOps, Security Engineering, or a similar role.
• Strong understanding of application security principles and methodologies.
• Experience with containerization technologies (e.g., Docker, Kubernetes).
• Proficient in programming and scripting languages (e.g., Python, Bash, Java, or Go).
• Familiarity with CI/CD tools (e.g., Jenkins, GitLab, CircleCI).
• In-depth knowledge of security frameworks and standards (e.g., NIST, ISO 27001, OWASP).
• Must possess a valid security clearance.

Technologies & Tools

The DevSecOps Engineer will work with a variety of technologies and tools, including but not limited to cloud platforms like AWS or Azure, security scanning tools (e.g., Snyk, Aqua Security), CI/CD tools (e.g., Jenkins, GitHub Actions), configuration management tools (e.g., Ansible, Terraform), and monitoring solutions (e.g., Splunk, ELK Stack). Familiarity with version control systems such as Git and collaboration tools like Jira or Confluence is also essential.

Ideal Candidates

The ideal candidates for the DevSecOps Engineer position will possess a proactive mindset, with a strong analytical approach to problem-solving. They should have excellent communication skills, allowing effective collaboration with teams across various functions. Candidates should be detail-oriented, capable of identifying potential security risks while maintaining operational efficiency. A passion for keeping abreast of trends in technology and security, combined with a team-oriented attitude and the ability to work autonomously, will further enhance an applicant's alignment with the role.