DevSecOps Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by System One, so some details may not match this job. The employer's own page has the real description.

Overview

The DevSecOps Engineer at System One will play a critical role in integrating security practices within the DevOps process. This position requires a proactive approach to automating security measures throughout the software development lifecycle, promoting a culture of security awareness. The successful candidate will collaborate with development and operations teams to ensure secure coding practices, implement security tools, and remediate vulnerabilities, all while maintaining high levels of efficiency and effectiveness within the deployment pipeline.

Job Responsibilities

• Implement and manage security tools, technologies, and processes across the CI/CD pipeline.
• Collaborate with development teams to integrate security practices into the software development lifecycle.
• Conduct regular security assessments and audits to identify vulnerabilities in applications and infrastructure.
• Develop and deliver security training sessions for developers and operational staff.
• Monitor and analyze security incidents, respond to breaches, and implement incident response plans.
• Create and maintain documentation related to security policies, standards, and procedures.
• Stay updated on emerging security threats, vulnerabilities, and industry trends.
• Enhance automation of security processes and integrate them into the development workflow.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.
• 2+ years of experience in a DevSecOps or related information security role.
• Strong understanding of security principles and practices in software development.
• Proficiency in scripting languages (e.g., Python, Bash) for automation of security tasks.
• Experience with CI/CD tools (e.g., Jenkins, GitLab CI) and container technologies (e.g., Docker, Kubernetes).
• Familiarity with security frameworks and standards (e.g., OWASP, NIST, ISO 27001).
• Strong analytical and problem-solving skills.
• Excellent communication and teamwork abilities.

Technologies & Tools

The ideal candidate will utilize a range of technologies and tools, including cloud platforms (such as AWS, Azure, or GCP), containerization technologies (Docker, Kubernetes), CI/CD pipelines (Jenkins, GitLab CI), security scanning tools (such as Fortify, Snyk, or Black Duck), and version control systems (Git). Familiarity with Infrastructure as Code (IaC) tools like Terraform or Ansible will also be advantageous.

Ideal Candidates

The ideal candidate for the DevSecOps Engineer role at System One is someone who possesses a blend of technical acumen and excellent communication skills. They are proactive problem-solvers who can work collaboratively with diverse teams while demonstrating a strong commitment to security best practices. They should be adaptable and willing to stay abreast of new technology trends and security threats. Passion for continuous learning and improvement, along with a detail-oriented mindset, will greatly contribute to their success in this pivotal role.