DevSecOps Engineer - Remote (WFH)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker US, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer at RemoteWorker US will be responsible for integrating security practices into the DevOps lifecycle, ensuring that security is an essential part of the development process. This role emphasizes collaboration among developers, operations, and security teams to automate and streamline processes, with a focus on enhancing the security posture of our applications and infrastructure. The individual will be pivotal in implementing security automation, continuously monitoring systems for vulnerabilities, and shaping our security policies to align with industry best practices on a remote work basis.

Job Responsibilities

• Implement security controls, processes, and technology in the CI/CD pipeline.
• Conduct security assessments and vulnerability scans on applications and infrastructure.
• Collaborate with development and operations teams to ensure secure coding practices are followed.
• Develop and maintain automation scripts for security tasks.
• Monitor and respond to security incidents and events.
• Design and conduct security training for technical teams.
• Stay updated on the latest security threats and trends, providing guidance on remediation.
• Document and report on security incidents and remediation strategies.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Proven experience working in a DevSecOps role or similar position.
• Strong understanding of cloud security principles and practices.
• Experience with security tools such as static and dynamic analysis tools.
• Proficiency in scripting languages such as Python, Bash, or PowerShell.
• Knowledge of CI/CD tools, such as Jenkins, GitLab CI, or CircleCI.
• Familiarity with container security and orchestration tools like Docker and Kubernetes.
• Relevant security certifications (e.g., CISSP, CISM, CEH, or others) are a plus.

Technologies & Tools

The DevSecOps Engineer will work primarily with tools and technologies that foster security within the development and operational pipelines. Key technologies include AWS or Azure for cloud environments, Docker and Kubernetes for container orchestration, Jenkins or GitLab CI for continuous integration and delivery, and various security tools like Snyk, Aqua Security, and OWASP ZAP for automated security assessments.

Ideal Candidates

Ideal candidates for this position will demonstrate a passion for security and a commitment to fostering a secure software development environment. They will possess effective communication skills, enabling them to bridge gaps between technical teams and non-technical stakeholders. Successful candidates will show initiative, a problem-solving mindset, and the ability to adapt in a fast-paced, evolving work environment. Moreover, candidates should exhibit teamwork and collaboration skills, ensuring a smooth integration of security practices throughout the organization.