DevSecOps Engineer - Remote (WFH)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker US, so some details may not match this job. The employer's own page has the real description.

Overview

The DevSecOps Engineer at RemoteWorker US will play a pivotal role in enhancing our software development pipelines by embedding security at every stage. This position involves collaborating closely with development and operations teams to ensure that security best practices are integrated seamlessly into the DevOps lifecycle. The successful candidate will be instrumental in automating security processes, conducting vulnerability assessments, and developing security policies and procedures while also actively monitoring and responding to security incidents.

Job Responsibilities

• Implement robust security measures across the entire software development lifecycle.
• Collaborate with developers and operations to advance DevOps practices that prioritize security.
• Conduct regular vulnerability assessments and penetration testing to identify security weaknesses.
• Develop and maintain security tools and automation scripts to streamline security processes.
• Create, review, and enforce security policies, procedures, and documentation.
• Monitor and respond to security incidents and conduct post-incident reviews.
• Educate team members on security best practices and foster a security-aware culture.
• Engage in continuous improvement efforts to enhance overall security posture.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Proven experience as a DevSecOps Engineer, Security Analyst, or a similar role.
• Strong understanding of CI/CD processes and toolchains.
• Proficiency in security tools such as static code analysis, dynamic application security testing, and intrusion detection systems.
• Familiar with cloud security protocols and tools (e.g., AWS, Azure, Google Cloud).
• Knowledge of scripting languages such as Python, Bash, or similar.
• Current industry certifications (e.g., AWS Certified Security, Certified Kubernetes Security Specialist) are a plus.
• Excellent problem-solving skills and a detail-oriented mindset.

Technologies & Tools

The DevSecOps Engineer will work with a variety of technologies and tools, including but not limited to: Jenkins for CI/CD, Docker and Kubernetes for container orchestration, cloud platforms such as AWS or Azure for cloud services, as well as security tools like Snyk, Aqua Security, and various static and dynamic scanning solutions. Proficiency in using collaboration tools such as Jira and Confluence for project management is also essential.

Ideal Candidates

The ideal candidates for this role will possess a proactive attitude and a strong desire to instill security measures within the development process. They will be adept communicators, capable of conveying complex security concepts to technical and non-technical stakeholders alike. A genuine interest in cybersecurity trends and practices, along with a commitment to continuous learning and improvement, will be essential for success in this dynamic environment.