DevSecOps Engineer - Remote (WFH)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker US, so some details may not match this job. The employer's own page has the real description.

Overview

As a DevSecOps Engineer at RemoteWorker US, you will play a critical role in integrating security practices within the DevOps process. By collaborating closely with development and operations teams, you will ensure that security is an inherent part of the software development lifecycle. Your responsibilities will include automating security-related tasks, conducting assessments, establishing security policies, and fostering a culture of security awareness among team members to protect our systems and data effectively.

Job Responsibilities

• Design and implement security measures throughout the software development lifecycle.
• Automate security testing, vulnerability assessments, and compliance checks within CI/CD pipelines.
• Collaborate with development and operations teams to identify and rectify security vulnerabilities.
• Develop and manage security policies, standards, and procedures.
• Provide training and support to developers regarding secure coding practices.
• Monitor and respond to security incidents and alerts on a continual basis.
• Conduct periodic security reviews and assessments to determine risks in systems and applications.
• Stay updated on emerging security threats and develop strategies to mitigate risks.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Proven experience working in a DevOps or security role, with a strong understanding of SDLC.
• Familiarity with cloud platforms such as AWS, Azure, or Google Cloud.
• Experience with security tools (e.g., Snyk, Aqua, or similar) and security frameworks.
• Strong knowledge of secure coding practices and application security principles.
• Experience with CI/CD tools such as Jenkins, GitLab CI, or CircleCI.
• Excellent problem-solving skills and the ability to work in a team-oriented environment.
• Relevant certifications (CISSP, AWS Security Specialty, etc.) are a plus.

Technologies & Tools

The DevSecOps Engineer will utilize a range of technologies and tools, including but not limited to, Jenkins for continuous integration, Terraform for infrastructure as code, and Docker for containerization. Familiarity with security scanning solutions like SonarQube and Snyk, as well as configuration management tools like Ansible or Chef, is essential. You will also engage with cloud service providers such as AWS and Azure, ensuring their services are secured and compliant with industry standards.

Ideal Candidates

Ideal candidates for this position will exhibit a strong passion for security and a drive to embed best practices within the development process. They will possess a proactive mindset, capable of identifying potential security weaknesses and working collaboratively to address them. A good fit will also demonstrate excellent communication skills, facilitating engagement with both technical and non-technical team members, and will maintain a commitment to continuous learning in an ever-evolving technology landscape.