DevSecOps Engineer - Remote | WFH

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Get It Recruit - Information Technology, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer at Get It Recruit - Information Technology will be an integral part of our mission to seamlessly integrate security practices within the DevOps process. This role entails working collaboratively with cross-functional teams to ensure that security is embedded at every stage of the software development lifecycle. The successful candidate will be responsible for identifying and mitigating security vulnerabilities, implementing secure coding practices, and automating security testing processes to continuously improve the overall security posture of the organization's applications and infrastructure.

Job Responsibilities

• Collaborate with development, operations, and security teams to integrate security practices into CI/CD pipelines.
• Identify, assess, and remediate security vulnerabilities throughout the software development lifecycle.
• Implement security tools and best practices to automate security testing and ensure compliance with security policies.
• Conduct security assessments, code reviews, and penetration testing to identify weaknesses in applications.
• Develop and maintain documentation related to security processes, policies, and procedures.
• Provide training and guidance to development teams on secure coding practices and security principles.
• Monitor and respond to security incidents and alerts in real-time.
• Collaborate with compliance teams to ensure adherence to regulatory standards such as GDPR, HIPAA, and others.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• A minimum of 3 years of experience in DevSecOps, security engineering, or a related field.
• Strong knowledge of security best practices, tools, and frameworks.
• Experience with CI/CD tools such as Jenkins, GitLab, or CircleCI.
• Familiarity with code analysis and vulnerability scanning tools (e.g., SonarQube, Snyk, Nessus).
• Proficient in scripting languages such as Python, Bash, or PowerShell.
• Knowledge of cloud security principles and experience with AWS, Azure, or Google Cloud Platform.
• Relevant security certifications (e.g., CISSP, CEH, AWS Security Specialty) are a plus.

Technologies & Tools

The DevSecOps Engineer will utilize a variety of technologies and tools, including but not limited to container orchestration platforms (e.g., Kubernetes, Docker), cloud infrastructure services (e.g., AWS, Azure), CI/CD tools (e.g., Jenkins, GitLab CI), and security testing frameworks (e.g., OWASP ZAP, Burp Suite). Familiarity with configuration management tools (e.g., Ansible, Puppet) and logging/monitoring platforms (e.g., Splunk, ELK Stack) will also be vital in ensuring robust security in development practices.

Ideal Candidates

Ideal candidates for the DevSecOps Engineer position will embody a proactive and collaborative mindset, demonstrating the ability to communicate effectively across different teams. They will possess a strong analytical approach to problem-solving, enabling them to identify security vulnerabilities and propose innovative solutions. A keen interest in continuous learning and staying updated on the latest security trends and technologies is essential. Additionally, candidates should exhibit a strong commitment to promoting security at every level of the organization while supporting team objectives geared towards enhancing overall application security.