DevSecOps Engineer - Remote (WFH)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker US, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer position at RemoteWorker US entails the integration of security practices within the DevOps process. The successful candidate will play a crucial role in automating and enhancing security in the software delivery pipeline while collaborating with cross-functional teams to ensure compliance, mitigate risks, and enhance application security. This role will also involve implementing security controls, monitoring vulnerabilities, and participating in incident response, thereby creating a culture of security awareness and responsibility throughout the development lifecycle.

Job Responsibilities

• Integrate security principles and practices into the DevOps pipeline from inception through design, development, deployment, and operations.
• Conduct security assessments and risk analysis, identifying vulnerabilities in applications and infrastructure.
• Automate security testing processes using industry best practices and available tools.
• Collaborate with development, operations, and security teams to address security-related issues and enhance security protocols.
• Monitor for threats and vulnerabilities, researching emerging security trends and technologies.
• Provide training and guidance to development teams on secure coding practices and the use of security tools.
• Participate in incident response, conducting root cause analysis and developing mitigation strategies.
• Document security controls, plans, and procedures, ensuring compliance with applicable regulations and standards.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent experience.
• Proven experience in a DevOps or DevSecOps role, with a strong focus on security.
• Familiarity with security automation tools such as SAST, DAST, and IAST.
• Working knowledge of cloud computing platforms (e.g., AWS, Azure, Google Cloud).
• Proficient in programming and scripting languages such as Python, Bash, or Go.
• Experience with CI/CD tools and methodologies.
• Strong understanding of security frameworks and compliance requirements (e.g., OWASP, NIST, PCI-DSS).
• Excellent analytical and problem-solving skills.
• Certifications in security (e.g., CISSP, CISM, or CEH) are a plus.

Technologies & Tools

The position requires familiarity with a range of technologies and tools integral to modern development and security practices. Candidates should be comfortable using CI/CD tools such as Jenkins or GitLab CI, containerization technologies like Docker and Kubernetes, as well as security assessment tools such as SonarQube, Nessus, and Burp Suite. Knowledge of version control systems such as Git and experience with cloud service configurations are also essential to effectively fulfill job responsibilities.

Ideal Candidates

The ideal candidate for the DevSecOps Engineer role is a proactive individual with a passion for security and automation. They should possess a collaborative mindset, allowing them to work effectively across various teams to drive security initiatives. Strong communication skills are paramount, as is an inquisitive nature that drives continuous learning and adaptation to new technologies and security challenges. Ideal candidates will demonstrate initiative, ownership of their work, and a commitment to maintaining high standards of security throughout the software development lifecycle.