DevSecOps Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Second Front Systems, so some details may not match this job. The employer's own page has the real description.

Overview

The DevSecOps Engineer at Second Front Systems plays a pivotal role in integrating security practices into the DevOps process. The candidate will work collaboratively with development, operations, and security teams to automate security processes and ensure that security is embedded at every stage of the software development life cycle. By leveraging security tools and best practices, the DevSecOps Engineer will enhance the organization's security posture while maintaining agility and efficiency in the deployment of applications.

Job Responsibilities

• Implement security best practices throughout the software development lifecycle.
• Automate security testing and monitoring processes in CI/CD pipelines.
• Collaborate with cross-functional teams to identify and mitigate security vulnerabilities.
• Develop and maintain security policies, procedures, and documentation.
• Conduct security audits and assessments on existing infrastructures and applications.
• Stay updated on emerging security threats and technologies.
• Provide training and guidance to development and operations teams on security principles and practices.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 3+ years of experience in DevSecOps, DevOps, or application security roles.
• Strong understanding of secure coding practices and common vulnerabilities (e.g., OWASP Top Ten).
• Proficiency with CI/CD tools such as Jenkins, GitLab CI, or similar.
• Experience with security tools like SAST, DAST, and IAST.
• Familiarity with cloud security for platforms such as AWS, Azure, or Google Cloud.
• Certifications such as Certified DevSecOps Professional (CDP), Certified Information Systems Security Professional (CISSP), or similar are a plus.

Technologies & Tools

The DevSecOps Engineer will utilize a range of technologies and tools, including but not limited to Jenkins, Docker, Kubernetes, AWS, Azure, Terraform, and various security testing tools such as Fortify, Veracode, and Burp Suite. Familiarity with programming languages such as Python, Java, or Go will also be essential for automation and scripting tasks.

Ideal Candidates

Ideal candidates for the DevSecOps Engineer position will possess strong analytical and problem-solving skills, along with a proactive approach to identifying and addressing security vulnerabilities. They should have a collaborative mindset, enabling them to work effectively within diverse teams. A commitment to continuous learning and staying abreast of the latest security trends and technologies will also distinguish exceptional candidates. Strong communication skills are crucial for articulating complex security concepts to non-technical stakeholders.