DevSecOps Systems Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Maryland Works, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Systems Engineer at Maryland Works will play a critical role in integrating security practices within the DevOps process. This position is responsible for designing and implementing automated security solutions, providing support for security policy compliance, and ensuring the highest levels of security in various development environments. The engineer will collaborate with cross-functional teams to enable secure CI/CD pipelines and contribute to the overall enhancement of the organization’s security posture while fostering a culture of continuous improvement and innovation.

Job Responsibilities

• Develop, implement, and manage security measures across the software development lifecycle.
• Collaborate with development teams to incorporate security practices into CI/CD pipelines.
• Conduct security assessments and threat modeling to identify vulnerabilities in applications and infrastructure.
• Provide guidance on secure coding practices and conduct code reviews focused on security.
• Monitor security systems and processes, responding to security alerts and incidents in a timely manner.
• Create and maintain documentation of security processes, procedures, and configurations.
• Stay current with security trends, threats, and technology solutions to proactively mitigate risks.
• Deliver training and awareness programs on DevSecOps best practices across the organization.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 3 years of experience in DevOps or Cloud operations with a strong focus on security.
• Proven experience with CI/CD tools such as Jenkins, GitLab CI, or equivalent.
• Familiarity with security tools and frameworks (e.g., SAST, DAST, IAST, and security vulnerability scanning tools).
• Understanding of security protocols, principles, and practices in software development.
• Experience with cloud services (AWS, Azure, or Google Cloud) and containerization technologies such as Docker and Kubernetes.
• Strong scripting skills in Python, Bash, or other languages to automate security-related tasks.
• Relevant security certifications (CISSP, CISM, CEH, or equivalent) are preferred.

Technologies & Tools

The DevSecOps Systems Engineer will utilize a range of technologies and tools to ensure secure software delivery. Key technologies include cloud platforms such as AWS or Azure, container orchestration systems like Kubernetes, CI/CD tools such as Jenkins and GitLab CI, as well as security tools for static and dynamic application security testing (SAST/DAST). Additionally, the engineer will leverage scripting languages such as Python and Shell scripting for automation and integration of security within development workflows.

Ideal Candidates

The ideal candidates for this position will possess a robust technical foundation along with a proactive and innovative mindset towards security. They should be team players with strong communication skills, capable of advocating for secure practices while fostering collaboration among diverse teams. A passion for continuous learning and adaptation to new technologies is essential, as is the ability to thrive in a fast-paced environment. Candidates should also demonstrate strong problem-solving abilities and a meticulous attention to detail, ensuring that security is ingrained in every aspect of the development process.