DevSecOps Engineer (Remote) - Security Clearance Required

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by ecocareers, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer plays a crucial role in the integration of security throughout the software development lifecycle, ensuring that security is a core component rather than an afterthought. This role combines aspects of development, security, and operations to create a secure software development environment. The candidate will work closely with cross-functional teams to design and implement secure practices that safeguard the organization's digital assets while fostering a culture of continuous improvement and compliance.

Job Responsibilities

• Develop and implement security policies, standards, and guidelines to safeguard applications and infrastructure.
• Integrate security best practices into DevOps processes, focusing on automation and efficiency.
• Conduct security assessments and vulnerability scans on applications and systems.
• Collaborate with development teams to address security concerns early in the software development lifecycle.
• Monitor security incidents, conduct root cause analysis, and implement corrective actions.
• Provide guidance and training to teams on secure coding practices and security tools.
• Stay up-to-date with the latest security trends, vulnerabilities, and regulatory requirements.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• At least 3 years of experience in software development, DevOps, or security roles.
• Strong understanding of DevSecOps practices and the security implications associated with CI/CD pipelines.
• Proficient in scripting languages such as Python, Bash, or similar.
• Experience with security tools and frameworks such as SAST, DAST, and Vulnerability Assessment tools.
• Knowledge of containerization and orchestration technologies, especially Docker and Kubernetes.
• Possession of relevant security certifications (e.g., CISSP, CISM, CEH) is a plus.
• Active security clearance is required for this position.

Technologies & Tools

The DevSecOps Engineer will utilize a variety of technologies and tools designed to enhance security and streamline operations. Common technologies include cloud platforms (AWS, Azure, Google Cloud), configuration management tools (Ansible, Terraform), containerization and orchestration software (Docker, Kubernetes), as well as CI/CD tools (Jenkins, GitLab CI, CircleCI). Knowledge of SIEM tools for monitoring and alerting is also beneficial.

Ideal Candidates

Ideal candidates for this position will possess a keen analytical mindset and strong problem-solving skills, emphasizing the importance of security in all facets of software development. They should exhibit excellent communication skills, enabling them to collaborate effectively with both technical and non-technical teams. A proactive attitude toward continuous learning and adaptation to new technologies and practices, as well as a commitment to fostering a secure development culture, is essential for success in this role.