DevSecOps Engineer - Remote | WFH

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Get It Recruit - Information Technology, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer will be responsible for integrating security practices into the DevOps framework throughout the entire development lifecycle. This role encompasses the design, implementation, and maintenance of automated security processes in a multi-cloud environment while ensuring compliance with industry standards. By collaborating with cross-functional teams, the DevSecOps Engineer will contribute to building secure applications, enhancing existing security processes, and advocating for a culture of security across the organization.

Job Responsibilities

• Design and implement security frameworks and best practices in the DevOps pipeline.
• Monitor and analyze application security vulnerabilities and oversee remediation efforts.
• Collaborate with development and operations teams to integrate security into CI/CD processes.
• Conduct security assessments and audits of cloud infrastructure and applications.
• Develop and manage automated security testing tools and methodologies.
• Provide training and mentorship to team members on secure coding practices and security principles.
• Remain up-to-date with emerging security threats and technology trends, applying learned knowledge to organizational practices.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Minimum of 3 years of experience in DevSecOps or a related field.
• Strong understanding of infrastructure as code (IaC) tools such as Terraform or CloudFormation.
• Experience with CI/CD tools such as Jenkins, GitLab CI, or CircleCI.
• Familiarity with containerization and orchestration tools, including Docker and Kubernetes.
• Knowledge of security protocols and compliance standards (e.g., NIST, ISO 27001, SOC 2).
• Excellent troubleshooting, communication, and teamwork skills.

Technologies & Tools

The DevSecOps Engineer will utilize a range of technologies and tools to ensure secure development practices. This includes cloud platforms such as AWS, Azure, or Google Cloud; security tools such as Snyk, Fortify, or Veracode; continuous integration and deployment tools like Jenkins or GitLab; and container orchestration systems like Kubernetes and Docker. Familiarity with configuration management tools such as Ansible or Puppet is also beneficial.

Ideal Candidates

The ideal candidate for the DevSecOps Engineer position is someone with a proactive posture towards security, a passion for building secure applications, and a strong ability to work collaboratively within diverse teams. They should possess analytical thinking skills and a mindset focused on continuous improvement in both security practices and the DevOps process. Additionally, the candidate should have excellent problem-solving abilities, a thirst for knowledge on evolving security trends, and the capacity to mentor others effectively.