DevSecOps Engineer - Remote (WFH)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker US, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer at RemoteWorker US will be instrumental in integrating security throughout the software development lifecycle. This role entails working collaboratively across development, operations, and security teams to ensure that secure coding practices and security measures are seamlessly implemented into the build and release processes. The successful candidate will utilize their expertise to automate security solutions, conduct risk assessments, and ensure compliance with established security standards, all while fostering a culture of security awareness and best practices within the organization.

Job Responsibilities

• Design, implement, and manage security solutions within CI/CD pipelines.
• Collaborate with development and operations teams to embed security into all stages of development.
• Conduct vulnerability assessments and penetration testing on applications and infrastructure.
• Monitor security postures and respond to incidents as they arise.
• Develop and enforce security policies, standards, and procedures.
• Automate security testing and reporting to ensure continuous compliance.
• Provide input on security architecture and direction for future initiatives.
• Educate team members on security best practices and promote a culture of security within the organization.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 3 years of experience in DevOps and security engineering.
• Strong understanding of automation tools like Jenkins, GitLab CI, or similar.
• Experience with security tools such as SAST, DAST, and IAST solutions.
• Proficiency in scripting languages (Python, Bash, etc.) for automation of security tasks.
• Knowledge of cloud security practices and familiarity with platforms such as AWS, Azure, or Google Cloud.
• Certifications such as CISSP, CISM, or relevant security certifications are preferred.

Technologies & Tools

The DevSecOps Engineer will work with a diverse set of technologies and tools including but not limited to Jenkins for CI/CD, Docker and Kubernetes for container orchestration, Terraform for infrastructure as code, and a variety of security tools like OWASP ZAP, SonarQube, and intrusion detection systems. Familiarity with cloud environments such as AWS, Azure, and GCP is essential to ensure security is a built-in aspect of cloud services and deployments.

Ideal Candidates

Ideal candidates will exhibit strong analytical and problem-solving capabilities, allowing them to effectively identify and mitigate security risks. They will possess excellent communication and collaboration skills, ensuring they can work well with cross-functional teams. A proactive mindset and a passion for staying updated with the latest security trends and threats are essential, as is the ability to work independently in a remote setting. Candidates should be detail-oriented and committed to fostering a culture of security within the organization.