DevSecOps Systems Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by GovCIO, so some details may not match this job. The employer's own page has the real description.

Job Overview

As a DevSecOps Systems Engineer at GovCIO, you will be responsible for integrating security practices within the DevOps process to enhance the development, deployment, and operational processes of software applications. You will collaborate with cross-functional teams to automate security tasks, implement security controls, and continuously monitor security performance. This role requires proactive engagement with developers, system administrators, and security teams to ensure that security is integrated seamlessly throughout the project lifecycle, ultimately contributing to the organization's commitment to achieving security excellence in all technological endeavors.

Job Responsibilities

• Design and implement secure CI/CD pipelines that incorporate security best practices.
• Perform risk assessments and security audits to identify vulnerabilities within systems and applications.
• Collaborate with development teams to ensure that security requirements are included in the software development life cycle (SDLC).
• Automate security testing tools and processes to streamline security validation throughout development phases.
• Monitor and analyze security incidents and provide recommendations for remediation.
• Educate and mentor team members on security policies and the integration of security tools.
• Maintain compliance with government regulations and industry standards related to cybersecurity.
• Develop documentation for security policies, procedures, and incident responses.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 3-5 years of experience in DevSecOps or a related security engineering role.
• Proficient in scripting languages such as Python, Bash, or PowerShell.
• Experience with cloud services (AWS, Azure, or Google Cloud Platform) and container technologies (Docker, Kubernetes).
• Strong understanding of security frameworks and compliance standards (NIST, ISO 27001, or CIS).
• Familiarity with security tools such as SIEM, IDS/IPS, and vulnerability scanners.
• Excellent problem-solving skills and a strong attention to detail.
• Effective communication and interpersonal skills to work collaboratively in team environments.

Technologies & Tools

The DevSecOps Systems Engineer will work with a variety of technologies and tools, including but not limited to:
- Continuous Integration/Continuous Deployment (CI/CD) tools such as Jenkins and GitLab CI.
- Cloud service platforms including AWS, Azure, and Google Cloud.
- Security automation tools like Snyk, Aqua Security, and HashiCorp Vault.
- Containerization and orchestration platforms such as Docker and Kubernetes.
- Security information and event management (SIEM) systems.

Ideal Candidates

Ideal candidates for the DevSecOps Systems Engineer position will be proactive, detail-oriented, and exhibit a strong commitment to security throughout their work. They will have a continuous improvement mindset, actively seeking innovative solutions to complex problems. Candidates should possess strong analytical skills, capable of evaluating risks and implementing effective security measures. Additionally, an ability to communicate technical concepts to non-technical stakeholders and a passion for collaborative work within diverse teams are essential qualities for success in this role.