DevSecOps Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by System Automation Corporation, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer at System Automation Corporation will be responsible for integrating security practices into the DevOps process, ensuring the security of our applications and infrastructure while promoting efficiency and collaboration between development, operations, and security teams. This role encompasses the implementation of security protocols, automation of security testing, and continuous improvement of security practices within our software development lifecycle. The successful candidate will work closely with cross-functional teams to promote a culture of security awareness and mitigate risks associated with software deployment and operations.

Job Responsibilities

• Design, implement, and manage automated security testing processes throughout the development lifecycle.
• Integrate security controls into CI/CD pipelines to enhance vulnerability detection and mitigation.
• Collaborate with development and operations teams to ensure security practices are embedded in workflows.
• Conduct threat modeling and risk assessments for new applications and system architectures.
• Monitor and respond to security incidents, conducting post-incident analyses to improve processes and protocols.
• Stay current with industry trends and best practices in DevSecOps and application security.
• Provide training and guidance to development and operations teams on secure coding practices and security tools.
• Develop and maintain security policies, standards, and procedures.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 3+ years of experience in DevOps, Security, or Software Development roles.
• Strong understanding of security principles and best practices in applications and infrastructure.
• Experience with CI/CD tools such as Jenkins, GitLab CI, or CircleCI.
• Proficiency in scripting languages (e.g., Python, Bash) for automation of security tasks.
• Knowledge of cloud security concepts and experience with cloud service providers (AWS, Azure, GCP).
• Familiarity with security tools such as SAST, DAST, and vulnerability management software.
• Certifications such as Certified Information Systems Security Professional (CISSP) or Certified DevSecOps Professional (CDP) are a plus.

Technologies & Tools

The DevSecOps Engineer will utilize a variety of technologies and tools essential for the role. This includes cloud platforms such as AWS or Azure, CI/CD tools like Jenkins and GitLab, security automation tools like Snyk or Fortify, and containerization technologies such as Docker and Kubernetes. Familiarity with infrastructure as code (IaC) tools such as Terraform or Ansible is also expected to support the deployment and security of applications.

Ideal Candidates

The ideal candidate for the DevSecOps Engineer position is someone who possesses a strong blend of technical expertise, problem-solving abilities, and a passion for enhancing security practices in a collaborative environment. They should display excellent communication skills to effectively share security knowledge with team members. Attention to detail, a proactive attitude towards innovation, and a commitment to continuous learning in the rapidly evolving field of security are key characteristics that will contribute to the success of the individual in this role.