DevSecOps Engineer - Senior Hybrid Remote

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Get It - Professional Services, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Senior DevSecOps Engineer at Get It - Professional Services will play a critical role in integrating security practices within the DevOps process. This individual will partner with various teams to enhance operational security, automate security checks, and ensure compliance throughout the software development lifecycle. The ideal candidate will leverage their expertise to foster a culture of security, drive the implementation of security tools, and monitor the effectiveness of these measures across various platforms and applications in a hybrid remote work environment.

Job Responsibilities

• Develop and implement security automation efforts within CI/CD pipelines to identify vulnerabilities early in the development process.
• Collaborate with application and infrastructure teams to improve security posture, ensuring adherence to best practices and compliance requirements.
• Monitor and respond to security incidents through appropriate investigation, analysis, and remediation strategies.
• Design security architectures and frameworks for deployment within both cloud and on-premises environments.
• Conduct regular security assessments, audits, and penetration testing to identify security weaknesses and recommend solutions.
• Provide mentorship and training to development and operational staff regarding secure development practices and tools.
• Maintain documentation of security policies, procedures, and compliance efforts, ensuring alignment with industry regulations.
• Stay current with emerging security threats, technologies, and industry trends to continuously enhance the organization's security posture.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field; Master’s degree is a plus.
• 5+ years of experience in software development and security operations, with a focus on DevSecOps practices.
• Proficient understanding of security frameworks, compliance standards, and methodologies (e.g., OWASP, NIST, ISO 27001).
• Experience with security tools such as static and dynamic analysis, identity and access management, and vulnerability scanning.
• Strong knowledge of cloud platforms (AWS, Azure, GCP) and their security models.
• Familiarity with container technologies (Docker, Kubernetes) and infrastructure as code (Terraform, CloudFormation).
• Excellent problem-solving skills with an acute attention to detail.
• Effective communication skills to convey complex security concepts to technical and non-technical stakeholders.

Technologies & Tools

The Senior DevSecOps Engineer will utilize a variety of technologies and tools in their daily tasks, including cloud services such as AWS and Azure, container orchestration tools like Kubernetes and Docker, continuous integration/continuous deployment (CI/CD) tools, and security-focused software for vulnerability scanning and management. Additionally, the role involves working with scripting and automation languages such as Python or Bash, as well as configuration management tools like Ansible or Puppet.

Ideal Candidates

The ideal candidate for this position possesses a strong blend of technical acumen and interpersonal skills. They are proactive problem solvers who remain calm under pressure and are eager to learn and adapt to the evolving landscape of security technologies. Furthermore, they exhibit strong collaboration skills and are enthusiastic about fostering a culture of security awareness across all teams. Individuals who take initiative, demonstrate a passion for continuous improvement, and possess a results-oriented mindset will thrive in this role.