Information System Security Engineer (DevSecOps)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Millennium Corporation, so some details may not match this job. The employer's own page has the real description.

Overview

The Information System Security Engineer (DevSecOps) at Millennium Corporation is responsible for ensuring the security of our information systems through the integration of security principles within the DevOps processes. This role encompasses the development, implementation, and management of security solutions and protocols to safeguard the organization's IT infrastructure. The engineer will work collaboratively with cross-functional teams to embed security throughout the application lifecycle, thus enhancing our security posture and compliance with relevant regulations while facilitating agile development practices.

Job Responsibilities

• Design and implement security architectures to protect information systems while accommodating DevOps practices.
• Develop and enforce security policies, standards, and procedures in alignment with best practices.
• Conduct security assessments, vulnerability scans, and penetration testing to identify and mitigate risks.
• Collaborate with development teams to conduct threat modeling and risk assessments throughout the software development lifecycle.
• Automate security processes to improve efficiency and efficacy within the CI/CD pipelines.
• Monitor security incidents and provide rapid incident response to mitigate threats.
• Implement security tools and solutions, providing guided training and resources to team members.
• Stay updated on the latest information security trends, threats, and technology solutions.

Qualifications

• Education: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Experience: Minimum of 3 years of experience working in information security or DevSecOps roles.
• Technical Skills: Proficient in security technologies and methodologies, including SIEM, IDS/IPS, firewall configurations, and DLP.
• Certifications: Relevant certifications such as CISSP, CISM, CEH, or similar are highly desirable.
• Knowledge: Strong understanding of cloud security concepts and experience with cloud platforms such as AWS, Azure, or Google Cloud.
• Programming Skills: Experience in scripting or programming languages, such as Python, Bash, or Go, for automation purposes.
• Collaboration: Excellent communication and collaboration skills to effectively work with diverse teams.

Technologies & Tools

This position requires familiarity with a range of technologies and tools vital for securing information systems and enhancing DevSecOps practices. Key technologies include security frameworks such as NIST and ISO 27001, vulnerability management tools like Nessus or Qualys, CI/CD tools such as Jenkins or GitLab CI, cloud security platforms like AWS Security Hub, and monitoring solutions like Splunk. Proficiency in containerization and orchestration tools like Docker and Kubernetes is also essential.

Ideal Candidates

The ideal candidate for the Information System Security Engineer (DevSecOps) position is a proactive problem-solver with a strong security mindset who thrives in collaborative environments. They possess a blend of technical expertise and the ability to communicate complex security concepts to non-technical team members. A strong commitment to continuous learning, adaptability to changing technologies, and a passion for safeguarding information systems are essential characteristics that will contribute to success in this role.