DevSecOps Engineer - Remote (WFH)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Cognitive Medical Systems, Inc., so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer at Cognitive Medical Systems, Inc. will play a pivotal role in integrating security practices within the DevOps process. This position involves collaborating closely with development and operations teams to ensure security is prioritized at every stage of the software development lifecycle. The successful candidate will be responsible for automating security controls, conducting vulnerability assessments, and implementing best practices that enhance the security posture of our applications and systems while ensuring seamless deployment and integration processes.

Job Responsibilities

• Collaborate with cross-functional teams to ensure security is integrated early into the software development process.
• Develop and implement automated security testing processes and tools to identify vulnerabilities within applications.
• Conduct regular security assessments and vulnerability scans to monitor compliance with established security policies.
• Respond to security incidents and provide thorough analysis and remediation strategies.
• Maintain and update security policies and procedures to ensure compliance with industry regulations and standards.
• Educate team members on secure coding practices, cloud security, and operational security contexts.
• Participate in incident response planning and execution.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.
• Minimum of 3 years of experience in DevSecOps, DevOps, or related fields.
• In-depth knowledge of security tools and practices, including but not limited to static and dynamic application security testing.
• Proficiency in scripting languages such as Python, Ruby, or Bash.
• Experience with containerization technologies (Docker, Kubernetes).
• Familiarity with cloud security concepts and platforms (AWS, Azure, GCP).
• Strong analytical and problem-solving skills, with attention to detail.
• Excellent written and verbal communication skills.

Technologies & Tools

The DevSecOps Engineer will utilize a variety of technologies and tools in their role, including cloud platforms (AWS, Azure), containerization tools (Docker, Kubernetes), continuous integration/continuous deployment (CI/CD) tools (Jenkins, GitLab CI), and security scanning tools (OWASP ZAP, SonarQube). Familiarity with configuration management tools such as Ansible or Terraform is also essential for this position.

Ideal Candidates

Ideal candidates for the DevSecOps Engineer position will possess a strong blend of technical expertise and a proactive approach to security. They should be innovative thinkers who demonstrate a commitment to continuous improvement and a passion for integrating security within development processes. Candidates should collaborate effectively in a team-oriented environment, exhibit strong communication skills, and are eager to educate others about security practices. A genuine interest in current security trends and best practices will also contribute to success in this role.