DevSecOps Engineer - Remote (US Only)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Jobs via Dice, so some details may not match this job. The employer's own page has the real description.

Overview

The DevSecOps Engineer will play a pivotal role in enhancing our operational capabilities by integrating security practices within the DevOps process. This position involves designing, implementing, and maintaining security measures across the software development lifecycle, ensuring that security requirements are met while promoting rapid development and deployment. The ideal candidate will collaborate with cross-functional teams to identify and rectify vulnerabilities, streamline processes, and foster a culture of security awareness within the organization.

Job Responsibilities

• Collaborate with development, operations, and security teams to implement security practices into CI/CD pipelines.
• Conduct regular security assessments and vulnerability testing to identify risks within applications and infrastructure.
• Implement and monitor automated security solutions and tools, ensuring adherence to security policies and standards.
• Educate and train teams on security best practices and tools to enhance overall security posture.
• Work with incident response teams to mitigate security breaches and ensure lessons learned are integrated into future projects.
• Document security measures and procedures, and update them regularly to reflect changing requirements.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 3+ years of relevant experience in DevSecOps, DevOps, or a combination of system administration and software development.
• Strong understanding of security principles, methodologies, and tools including cloud security.
• Proficient in scripting languages such as Python, Bash, or similar.
• Experience with containerization technologies (e.g., Docker, Kubernetes) and configuration management tools (e.g., Ansible, Terraform).
• Knowledge of web application security, OWASP, and secure coding practices.

Technologies & Tools

The DevSecOps Engineer will primarily work with a variety of technologies and tools including cloud platforms (AWS, Azure, or Google Cloud), CI/CD tools (Jenkins, GitLab, CircleCI), security assessment tools (Snyk, Aqua Security, SonarQube), and monitoring solutions (Splunk, ELK Stack). Familiarity with container orchestration tools and Infrastructure as Code technologies will be essential to ensuring secure deployment practices.

Ideal Candidates

Ideal candidates for this role will possess a strong analytical mindset combined with excellent problem-solving skills. They should be adept at communication and collaboration, fostering a sense of teamwork and accountability across various departments. A proactive approach towards identifying potential security issues and a passion for continuous improvement in operational practices will further enhance their fit within our organization. Additionally, eagerness to stay abreast of the latest trends and best practices in DevSecOps is highly valued.