DevSecOps Engineer - Remote (WFH)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker US, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer is responsible for integrating security practices into the DevOps process, ensuring that security is a foundational component throughout the software development lifecycle. This role involves collaboration with development, operations, and security teams to implement secure coding practices, conduct vulnerability assessments, and automate security testing. The successful candidate will play a crucial part in fostering a culture of security awareness and compliance while optimizing deployment pipelines and improving overall application security posture.

Job Responsibilities

• Integrate security practices into the continuous integration and continuous deployment (CI/CD) pipeline.
• Monitor and address security vulnerabilities in applications and infrastructure.
• Collaborate with development teams to establish secure coding standards and guidelines.
• Conduct regular security assessments and code reviews to identify weaknesses in the application.
• Automate security testing and ensure compliance with industry standards and regulatory requirements.
• Develop and maintain security tooling and automation solutions for efficient detection and response.
• Provide training and support to development and operations teams on security best practices.
• Stay current with the latest security trends, vulnerabilities, and technology solutions.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 3+ years of experience in DevSecOps, DevOps, or software development with a focus on security.
• Strong understanding of cloud security concepts and experience with one or more cloud platforms (e.g., AWS, Azure, GCP).
• Proficiency in scripting languages (e.g., Python, Bash) for automation.
• Experience with security tools and technologies such as SAST, DAST, and container security solutions.
• Knowledge of regulatory standards such as GDPR, HIPAA, PCI-DSS, and their implementation in a DevOps environment.
• Strong communication skills with the ability to work collaboratively in a remote team environment.

Technologies & Tools

The DevSecOps Engineer will work with a variety of technologies and tools including, but not limited to, Jenkins, GitLab CI/CD, Terraform, Docker, Kubernetes, HashiCorp Vault, and security scanning tools such as Snyk, Checkmarx, and OWASP ZAP. Proficiency in these tools is essential for successfully implementing security practices throughout the CI/CD process and managing secure infrastructure.

Ideal Candidates

The ideal candidate for this position should demonstrate a proactive approach to security, a genuine passion for technology, and a commitment to continuous improvement. They should possess strong problem-solving skills, a keen attention to detail, and the ability to communicate complex security concepts to non-technical stakeholders. Additionally, candidates should thrive in a collaborative remote work environment and show adaptability to changing technologies and processes.