DevSecOps Engineer - Remote (WFH)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker US, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer at RemoteWorker US is responsible for integrating security practices within the DevOps process. The role focuses on automating security protocols, enhancing CI/CD pipelines, and performing comprehensive security assessments to ensure the integrity and confidentiality of applications and data. The ideal candidate will work collaboratively with development and operations teams to identify security vulnerabilities and implement proactive measures, supporting a culture of security awareness across all departments.

Job Responsibilities

• Develop and implement security automation tools and frameworks within the CI/CD pipeline.
• Conduct security assessments, vulnerability scans, and penetration tests on applications and systems.
• Collaborate with development and operations teams to identify security improvements and ensure compliance with security standards.
• Monitor systems and applications for security breaches and implement incident response protocols.
• Provide guidance and training to engineering teams on secure coding practices and security best practices.
• Stay updated on the latest security trends, threats, and technological advancements.
• Document security procedures and contribute to the organization's security policies.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Minimum of 3 years of experience in DevOps or Information Security, preferably within an agile environment.
• Strong understanding of cloud environments, especially AWS, Azure, or Google Cloud.
• Proficiency in scripting languages such as Python, Bash, or Ruby.
• Experience with security tools and technologies, including SIEM, IDS/IPS, and vulnerability assessment tools.
• Knowledge of container security with tools like Docker and Kubernetes.
• Relevant security certifications (e.g., CISSP, CISM, or AWS Certified Security) are highly desirable.

Technologies & Tools

The DevSecOps Engineer will work with a variety of technologies and tools including, but not limited to, Jenkins, Git, Docker, Kubernetes, Terraform, and various security tools for vulnerability assessment such as Qualys or Nessus. Familiarity with cloud service platforms such as AWS, Azure, or Google Cloud is essential. The position will also utilize monitoring tools like Splunk or ELK stack for incident detection and response.

Ideal Candidates

The ideal candidate for this position should possess a proactive mindset with an unwavering commitment to continuous improvement in security practices. They should exhibit strong problem-solving skills, effectively collaborate across diverse teams, and communicate technical concepts succinctly to both technical and non-technical stakeholders. A deep understanding of the software development lifecycle and a passion for security innovation will set candidates apart in this role.