Information System Security Engineer (DevSecOps)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Millennium Corporation, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Information System Security Engineer (DevSecOps) at Millennium Corporation will play a critical role in integrating security protocols into the development and operational processes of software applications. The incumbent will be responsible for implementing security best practices throughout the software development lifecycle (SDLC), ensuring compliance with regulatory standards, performing risk assessments, and collaborating with cross-functional teams to foster a culture of security awareness. This role requires a strategic mindset to secure cloud environments and contribute to the overall enhancement of the organization’s information security posture.

Job Responsibilities

• Develop, enhance, and maintain security architecture for various cloud-based applications.
• Integrate security into DevOps practices, ensuring all development projects comply with industry standards.
• Conduct regular security assessments, vulnerability scans, and penetration testing to identify and mitigate risks.
• Collaborate with development teams to provide guidance on secure coding practices.
• Implement monitoring and alerting mechanisms to detect and respond to potential security incidents.
• Maintain security documentation, including risk assessment reports, security policies, and incident response plans.
• Provide security training and awareness programs for development and operations teams.
• Coordinate with compliance teams to align security practices with regulatory requirements and industry standards.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 5 years of experience in information security, with a focus on DevSecOps methodologies.
• Strong understanding of cloud security principles and experience with cloud service providers (AWS, Azure, Google Cloud).
• Proficiency in programming and scripting languages such as Python, Java, or Bash.
• Familiarity with security tools like SIEM, IDS/IPS, and vulnerability assessment frameworks.
• Relevant security certifications such as CISSP, CEH, or Security+ are highly desirable.
• Excellent analytical and problem-solving skills, with a keen attention to detail.
• Strong communication skills, capable of articulating complex security concepts to non-technical stakeholders.

Technologies & Tools

The Information System Security Engineer (DevSecOps) will work with a variety of technologies and tools designed to enhance security across development and operational processes. This includes cloud-based platforms such as AWS and Azure, version control systems like Git, CI/CD tools such as Jenkins or GitLab CI, as well as security assessment tools including Nessus, Burp Suite, and various static and dynamic analysis tools. Understanding containerization technologies (Docker, Kubernetes) is also essential to ensure security practices are effectively integrated into modern application architectures.

Ideal Candidates

Ideal candidates for the Information System Security Engineer position will demonstrate a proactive approach to security and possess a strong analytical mindset. They will have a collaborative spirit, capable of working effectively with both technical and non-technical teams. A continuous learning attitude and the ability to adapt to new technologies and threat landscapes are critical qualities. Furthermore, candidates should exhibit a strong commitment to best practices in security and the capacity to communicate potential risks and mitigation strategies clearly to stakeholders across the organization.