DevSecOps Engineer - Remote (WFH)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker US, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer at RemoteWorker US will be responsible for integrating security practices into the DevOps process while managing and enhancing the automation of operations. This role entails collaborating with cross-functional teams to secure the development pipeline, assess security vulnerabilities within cloud infrastructure, and implement robust security measures that harmonize with the pace of continuous integration/continuous deployment (CI/CD). The engineer will also drive initiatives that promote a culture of security awareness and best practices across teams, ensuring that security is a shared responsibility throughout the software development lifecycle.

Job Responsibilities

• Design and implement security measures within continuous integration and deployment pipelines.
• Collaborate with software development, operations, and security teams to identify and rectify security vulnerabilities.
• Conduct automated security testing and integrate it into the existing CI/CD processes.
• Monitor cloud environments for security breaches and incidents while responding promptly to any alerts.
• Ensure compliance with industry standards and regulations, enforcing policies that govern security controls.
• Create and maintain documentation of security requirements, processes, and policies.
• Provide training and support to development teams regarding secure coding practices and security tools.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Proven experience in DevOps practices and tools, with a focus on security.
• Strong knowledge of security frameworks, best practices, and tools (e.g., OWASP, SANS).
• Experience with cloud service providers, such as AWS, Azure, or Google Cloud Platform.
• Familiarity with CI/CD tools, such as Jenkins, GitLab CI, or CircleCI.
• Proficient in scripting languages (e.g., Python, Bash) and infrastructure as code (IaC) tools (e.g., Terraform, Ansible).
• Strong analytical and problem-solving skills with a focus on proactive security measures.

Technologies & Tools

The DevSecOps Engineer will utilize a range of technologies and tools to efficiently implement security practices across the DevOps landscape. Key technologies may include cloud platforms such as AWS or Azure, CI/CD tools like Jenkins or GitLab, vulnerability assessment tools such as Nessus or Burp Suite, and infrastructure management tools including Terraform and Ansible. Proficiency in scripting tools such as Python and Bash is essential to automate and facilitate security processes throughout the development lifecycle.

Ideal Candidates

The ideal candidate for the DevSecOps Engineer position embodies a proactive approach to security, demonstrating a commitment to continuous improvement and learning in a rapidly evolving environment. They should possess strong communication skills to engage effectively with various stakeholders, instilling a culture of security awareness. Adaptability, a problem-solving mindset, and a collaborative spirit are also essential, as the candidate will work closely with multiple departments to achieve shared security goals while ensuring the swift delivery of software solutions.