DevSecOps Engineer (Remote) - Security Clearance Required

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by ecocareers, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer plays a pivotal role in enhancing our security posture by integrating security practices within the DevOps process. This position requires a deep understanding of both software development and operational security principles. The successful candidate will collaborate closely with development teams to implement robust security measures, perform vulnerability assessments, and ensure compliance with security standards. Responsibilities also include automating security workflows and promoting a security-first culture across the organization.

Job Responsibilities

• Integrate security into the CI/CD pipeline to automate security testing and enable secure deployments.
• Collaborate with development and operations teams to identify and mitigate security risks throughout the software development lifecycle.
• Conduct security assessments, vulnerability scans, and threat modeling to identify potential vulnerabilities in applications and infrastructure.
• Implement and manage security tools and frameworks that facilitate secure application development.
• Review and enforce security policies, procedures, and best practices across all platforms.
• Educate and train teams on secure coding practices and security awareness.
• Respond to and mitigate security incidents, ensuring appropriate remediation and reporting.
• Stay updated on the latest security threats, vulnerabilities, and technologies to proactively enhance security measures.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 3 years of experience in DevOps and/or security engineering.
• Experience with security frameworks and compliance standards (e.g., NIST, ISO 27001, SOC 2).
• Proficiency in scripting languages such as Python, Bash, or PowerShell.
• Strong understanding of cloud security principles, particularly on AWS, Azure, or GCP platforms.
• Experience with configuration management and infrastructure as code (e.g., Terraform, Ansible).
• Ability to obtain and maintain a security clearance.

Technologies & Tools

The DevSecOps Engineer will work with a variety of technologies and tools including Jenkins, GitLab CI/CD, Docker, Kubernetes, AWS Security services, and various vulnerability scanning and compliance tools such as Qualys or Nessus. Familiarity with Infrastructure as Code (IaC) tools, including Terraform and Ansible, as well as security monitoring tools like Splunk or ELK Stack, is also essential for this role.

Ideal Candidates

Ideal candidates for the DevSecOps Engineer position are proactive individuals who possess a strong problem-solving mindset and a keen eye for detail. They demonstrate excellent communication skills and the ability to effectively collaborate with cross-functional teams. A deep passion for security and continuous learning is crucial, as well as the ability to adapt to changing technologies and security landscapes. Candidates who thrive in a fast-paced, remote environment and show a commitment to fostering a security-first culture will excel in this role.