DevSecOps Engineer (Remote) with Security Clearance

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Kingfisher Systems, Inc., so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer at Kingfisher Systems, Inc. plays a critical role in creating and maintaining secure development and operational environments for our software products. This remote position requires a security clearance as you will employ best practices in security, integrate security processes into DevOps pipelines, and ensure compliance with regulatory requirements. You will collaborate with cross-functional teams to automate security controls and streamline security processes while promoting a culture of security through training and advanced tooling.

Job Responsibilities

• Design, implement, and manage CI/CD pipelines with a strong focus on security integration.
• Conduct threat modeling and risk assessments to identify and mitigate vulnerabilities in code and infrastructure.
• Integrate automated security scanning tools into the development lifecycle.
• Collaborate with development and operations teams to ensure security best practices are followed throughout the software development lifecycle.
• Monitor system security vulnerabilities and recommend necessary patches and updates.
• Develop and maintain security documentation, including security policies and procedures.
• Provide training and guidance to development teams on secure coding practices.
• Stay informed about the latest security trends, threats, and technology solutions.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum 3 years of experience in DevSecOps or a related security engineering role.
• Strong understanding of DevOps practices and cloud infrastructure.
• Experience with security frameworks and standards such as NIST, OWASP, and ISO 27001.
• Proficiency in scripting languages (e.g., Python, Bash) and CI/CD tools (e.g., Jenkins, GitLab CI).
• Familiarity with containerization technologies (Docker, Kubernetes) and cloud platforms (AWS, Azure, GCP).
• Current security clearance is required for this position.
• Strong analytical and problem-solving skills with a keen attention to detail.

Technologies & Tools

The DevSecOps Engineer will utilize a range of technologies and tools, including but not limited to Jenkins for CI/CD, Docker and Kubernetes for container orchestration, AWS or Azure for cloud services, as well as various security scanning tools such as Snyk, Aqua Security, and Burp Suite. Familiarity with configuration management tools like Ansible or Terraform may also be required in automating infrastructure management.

Ideal Candidates

The ideal candidate for the DevSecOps Engineer role will possess a proactive mindset and a strong passion for security within the software development lifecycle. They should demonstrate excellent communication skills to effectively collaborate with diverse teams. A successful candidate will be adaptable, capable of thriving in a fast-paced environment, and committed to ongoing professional development. Critical thinking and innovative problem-solving capabilities are highly valued, allowing them to develop creative solutions to complex security challenges.