DevSecOps Engineer (Remote) - Security Clearance Required

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by ecocareers, so some details may not match this job. The employer's own page has the real description.

Overview

The DevSecOps Engineer at EcoCareers will play a pivotal role in integrating security practices within the DevOps development lifecycle. This remote position requires an individual with an active security clearance who can collaborate effectively with engineering teams and stakeholders to ensure security protocols are seamlessly integrated throughout the software development process. The ideal candidate will be responsible for implementing security measures, performing risk assessments, and advocating for best practices to secure applications and services in a cloud environment.

Job Responsibilities

• Design, implement, and optimize security controls in the software development lifecycle.
• Conduct regular security assessments, audits, and vulnerability assessments on applications and systems.
• Provide guidance and support to development teams regarding secure coding practices.
• Collaborate with DevOps teams on the automation of security processes in CI/CD pipelines.
• Monitor and respond to security incidents and threats within the deployed applications and infrastructure.
• Stay current with emerging security threats and vulnerabilities relevant to the organization's technology stack.
• Develop and deliver security awareness training for development teams.
• Create and maintain security documentation, including policies and procedures.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 3 years of experience in a DevOps, Security, or related role.
• Understanding of security frameworks, such as NIST, ISO 27001, or OWASP.
• Experience with cloud security tools and practices, particularly in AWS, Azure, or Google Cloud environment.
• Proficiency in programming and scripting languages, such as Python, Bash, or Java.
• Hands-on experience with security tools such as static and dynamic analysis tools, container security tools, and SIEM solutions.
• Certifications such as CISSP, CISM, or AWS Certified Security Specialty are preferred.
• Active security clearance is required.

Technologies & Tools

The DevSecOps Engineer will utilize a variety of technologies and tools, including but not limited to container orchestration systems such as Kubernetes, security scanning tools like Snyk or Fortify, CI/CD tools like Jenkins or GitLab CI, and cloud platforms including AWS, Azure, or Google Cloud. Familiarity with Infrastructure as Code (IaC) tools such as Terraform or CloudFormation will also be beneficial in automating security processes and deployments.

Ideal Candidates

The ideal candidate for this position will possess a strong passion for security and a proactive approach to problem-solving. A successful DevSecOps Engineer is detail-oriented, with the ability to work collaboratively in a fast-paced environment. They should have excellent communication skills to articulate security concepts and practices to varied audiences and show a commitment to continuous learning and staying abreast of the latest security trends and technologies. Passion for technology and a strategic mindset towards integrating security within DevOps is essential for this role.