DevSecOps Engineer - Remote (WFH)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker US, so some details may not match this job. The employer's own page has the real description.

Job Overview

As a DevSecOps Engineer at RemoteWorker US, you will be pivotal in integrating security into our development and operations processes. Your primary role will involve collaborating with software developers and IT operations to enhance the security posture of our applications and infrastructure, ensuring that security practices and tools are seamlessly integrated throughout the software development lifecycle. You will also work to automate security testing and monitoring, manage security incidents, and maintain compliance with industry standards, ultimately contributing to a secure and reliable software environment.

Job Responsibilities

• Collaborate with development and operations teams to implement security measures throughout the software development lifecycle.
• Identify and mitigate potential security vulnerabilities in application code and infrastructure.
• Automate security testing and monitoring processes for continuous integration and delivery pipelines.
• Develop and maintain security policies and compliance frameworks to meet industry standards.
• Conduct security assessments, audits, and vulnerability management.
• Respond to security incidents and investigate breaches and risks to ensure timely remediation.
• Stay updated with the latest security trends, threats, and best practices in DevSecOps.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• At least 3 years of experience in DevOps, security engineering, or a related role.
• Proficient in security tools such as SAST, DAST, and vulnerability scanning tools.
• Experience with cloud platforms like AWS, Azure, or GCP.
• Strong scripting skills in languages such as Python, Bash, or PowerShell.
• Solid understanding of networking concepts, protocols, and security practices.
• Relevant certifications such as CISSP, CISM, or AWS Certified Security is a plus.

Technologies & Tools

In this role, you will utilize a variety of technologies and tools crucial for effective DevSecOps practices. Key technologies include cloud platforms (AWS, Azure, GCP), CI/CD tools (Jenkins, GitLab CI), security tools such as OWASP ZAP, Fortify, and various scripting languages for automation. Familiarity with containerization technologies like Docker and orchestration tools like Kubernetes will also be essential for securing our applications at scale.

Ideal Candidates

The ideal candidate for the DevSecOps Engineer position will possess a proactive and analytical mindset, with an unwavering commitment to security practices. They should have excellent communication skills to facilitate collaboration across cross-functional teams. Strong problem-solving abilities, attention to detail, and a passion for continually improving and evolving security measures will distinguish an exceptional candidate. Moreover, they should be adaptable to a fast-paced work environment and committed to ongoing learning in the rapidly changing landscape of cybersecurity and cloud technology.