DevSecOps Engineer - Remote (WFH)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker US, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer at RemoteWorker US will play a crucial role in integrating security practices within the DevOps process. This position involves collaborating with development, operations, and security teams to ensure the secure development, deployment, and maintenance of software applications. The ideal candidate will employ automation and continuous integration techniques to streamline security assessments and maintain compliance with industry standards. Responsibilities will include ensuring secure coding practices, performing vulnerability scans, and continuously improving security measures throughout the software development lifecycle.

Job Responsibilities

• Collaborate with cross-functional teams to implement security best practices across all phases of software development.
• Conduct regular security assessments and audits on applications, systems, and architectures.
• Develop and maintain automated security testing frameworks and integrate them into CI/CD pipelines.
• Monitor security alerts and vulnerabilities, implementing appropriate remediation steps.
• Educate teams on secure coding practices and risks associated with various technologies.
• Stay updated on industry trends, threats, and vulnerabilities, ensuring the organization is aware and prepared.
• Participate in incident response and develop strategies for threat modeling and analysis.
• Document security policies, procedures, and compliance requirements relevant to software development.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity or related field.
• Minimum of 3 years of experience in DevOps or security roles, with a strong understanding of software development methodologies.
• Proficiency in programming languages such as Python, Java, or Go.
• Experience with security tools like SAST, DAST, IAST, and others.
• Familiarity with cloud security practices and technologies, particularly AWS, Azure, or Google Cloud.
• Strong understanding of network security principles and practices.
• Excellent analytical and problem-solving skills to identify and remediate vulnerabilities.
• Relevant certifications such as CISSP, CEH, or similar are highly desirable.

Technologies & Tools

The DevSecOps Engineer will work with a variety of technologies and tools to enhance security across the software development lifecycle. Key tools include CI/CD systems such as Jenkins and GitLab, security testing tools like Fortify and Burp Suite, cloud platforms including AWS and Azure, along with various containerization and orchestration technologies like Docker and Kubernetes. Familiarity with Infrastructure as Code (IaC) tools such as Terraform or Ansible will also be essential for automating security configurations.

Ideal Candidates

The ideal candidate for the DevSecOps Engineer position is a proactive problem-solver who thrives in a collaborative environment. They possess outstanding communication skills, enabling effective interaction across various teams. A strong attention to detail is essential, as is the ability to stay focused under pressure and manage multiple priorities. The candidate should have a passion for continuous improvement, both in their own skills and in the security processes they oversee. A willingness to embrace and adapt to new technologies and methodologies is also a key trait that will contribute to their success in this role.