DevSecOps Engineer(Remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by SAGE IT, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer at SAGE IT will play a pivotal role in integrating security practices into the DevOps process. This position emphasizes a holistic approach to development, focusing on automating security protocols and ensuring that security considerations are integrated at every phase of the software development life cycle. The selected candidate will collaborate with software developers, system operators, and other IT staff to manage and develop secure applications while ensuring adherence to security standards and compliance requirements.

Job Responsibilities

• Design and implement security measures across the DevOps pipeline to safeguard applications and systems.
• Conduct threat modeling and risk assessments to identify potential vulnerabilities in the development process.
• Collaborate with development teams to incorporate security testing within CI/CD pipelines.
• Install, configure, and maintain security tools and software (e.g., firewalls, encryption solutions, intrusion detection systems).
• Monitor and respond to security incidents, providing detailed analysis and reporting as necessary.
• Participate in code reviews and enforce security best practices for application development.
• Provide training and support to development and operations teams on security awareness and compliance policies.
• Stay updated on the latest security trends and threat landscapes to enhance organizational practices.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 3 years of experience in DevOps or software development, with a focus on security.
• Comprehensive understanding of security architectures, tools, and frameworks (e.g., OWASP, NIST).
• Proficiency in scripting languages such as Python, Bash, or PowerShell.
• Experience with cloud technologies and platforms (AWS, Azure, GCP) and their security features.
• Strong knowledge of containerization and orchestration tools (Docker, Kubernetes).
• Familiarity with security compliance and data protection laws (GDPR, HIPAA, etc.).
• Relevant security certifications (e.g., CISSP, CISM, CEH) are highly desirable.

Technologies & Tools

The DevSecOps Engineer will collaborate with a range of technologies and tools, including but not limited to CI/CD tools (Jenkins, GitLab CI), security scanning tools (SonarQube, Veracode), containerization solutions (Docker, Kubernetes), cloud services (AWS, Azure), and scripting languages (Python, Ruby). Familiarity with infrastructure as code (Terraform, Ansible) and version control systems (Git) is also essential.

Ideal Candidates

Ideal candidates for the DevSecOps Engineer position possess a unique blend of analytical and technical skills, including innovative thinking to proactively identify security challenges. They should demonstrate strong communication skills to effectively liaise with various stakeholders, including developers, operations personnel, and management. A proactive approach to problem-solving, attention to detail, and a strong commitment to security best practices are critical qualities that will contribute to success in this role. Candidates should be team-oriented, adaptable to changing technologies, and dedicated to continuous learning in the ever-evolving field of cyber security.