DevSecOps Engineer (Remote) - Security Clearance Required

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by ecocareers, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer plays a pivotal role in integrating security practices within the DevOps process, ensuring consistent security throughout the software development lifecycle. This position is responsible for collaborating with development and operations teams to implement security measures, conducting security assessments, and automating security controls. The successful candidate will work remotely and hold a valid security clearance, contributing to the organization's commitment to maintaining high-security standards while optimizing deployment processes.

Job Responsibilities

• Develop and maintain security automation tools and scripts to enhance the security posture of applications and infrastructure.
• Conduct regular security assessments and vulnerability management across development pipelines.
• Collaborate closely with development, testing, and operations teams to seamlessly integrate security practices into CI/CD workflows.
• Implement and manage security configurations and policies for cloud environments and on-premises applications.
• Develop and conduct security training and awareness programs for development and operations personnel.
• Monitor and analyze security logs and alerts to identify potential vulnerabilities and incidents.
• Research and evaluate emerging security technologies and methodologies to improve security practices.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Minimum of 3-5 years of experience in a DevSecOps, security engineering, or a related role.
• Strong understanding of cloud security principles and experience with tools such as AWS, Azure, or Google Cloud Platform.
• Proficiency in at least one programming or scripting language, such as Python, Bash, or PowerShell.
• Familiarity with continuous integration and continuous deployment (CI/CD) tools such as Jenkins, GitLab CI, or CircleCI.
• Valid security clearance is required; additional security certifications are preferred (e.g., CISSP, CEH, or similar).
• Solid understanding of threat modeling, risk assessment, and security compliance frameworks.

Technologies & Tools

The DevSecOps Engineer will work with a variety of technologies and tools, including but not limited to: cloud platforms such as AWS, Azure, or Google Cloud Platform; CI/CD tools like Jenkins, GitLab CI, and CircleCI; security scanning tools like Snyk, Aqua Security, and OWASP ZAP; as well as containerization technologies including Docker and Kubernetes. Familiarity with infrastructure as code (IaC) tools such as Terraform or Ansible will also be essential.

Ideal Candidates

Ideal candidates for the DevSecOps Engineer position possess a strong technical background coupled with a deep commitment to security excellence. They exhibit excellent problem-solving skills, showcase agility in adapting to new technologies, and demonstrate a collaborative mindset, allowing them to work effectively with cross-functional teams. Additionally, outstanding communication skills and a proactive approach to identifying and mitigating risks are essential traits that facilitate a productive and security-focused work environment.