Principal DevSecOps Engineer REMOTE

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by SAIC, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Principal DevSecOps Engineer at SAIC will be responsible for designing, implementing, and scaling secure software development practices and tools across various projects. This role involves collaborating with development teams to embed security into the DevOps lifecycle, ensuring that security is a shared responsibility. The ideal candidate will have extensive experience in security best practices, continuous integration/continuous deployment (CI/CD) pipelines, cloud infrastructures, and automation, as they lead initiatives to enhance system resilience and compliance within the organization's operational framework.

Job Responsibilities

• Design and implement methods to integrate security controls into the CI/CD pipeline.
• Collaborate with software development and operations teams to create secure infrastructure and applications.
• Perform industrial security assessments and facilitate compliance with regulatory frameworks.
• Identify vulnerabilities and implement strategies to mitigate risks within applications and infrastructure.
• Develop and maintain security dashboards and metrics to provide visibility into security posture.
• Conduct training and awareness programs focused on secure coding practices and security policies.
• Stay current with changing threats and industry standards, incorporating relevant updates into security protocols.
• Participate in incident response activities and root-cause analysis to prevent future security events.

Qualifications

• A Bachelor's degree in Computer Science, Information Technology, or related field; Master's degree preferred.
• Minimum of 7 years of experience in software development, IT security, and DevOps practices.
• Strong proficiency with CI/CD tools such as Jenkins, GitLab CI, or equivalent.
• Demonstrated expertise in secure coding practices and application security assessments.
• Familiarity with cloud platforms such as AWS, Azure, or Google Cloud.
• Solid understanding of regulatory frameworks such as NIST, ISO 27001, or CIS Standards.
• Certifications such as CISSP, CISM, or AWS Certified Security Specialty are highly desirable.

Technologies & Tools

The Principal DevSecOps Engineer will work with a variety of technologies and tools, including but not limited to Jenkins for CI/CD processes, Terraform for infrastructure as code, Docker for containerization, and Kubernetes for orchestration. Familiarity with security tools such as Snyk or Checkmarx for vulnerability scanning, along with log management solutions like ELK or Splunk, will also be essential. Cloud technologies, primarily AWS and Azure, will be utilized to support scalable and secure application architectures.

Ideal Candidates

The ideal candidate for the Principal DevSecOps Engineer role is someone who possesses a strong blend of technical expertise and leadership capabilities. They should be proactive in identifying challenges and possess a strong analytical mindset to solve complex security issues. Effective communication skills are paramount, as this position requires collaboration with cross-functional teams. A passion for security and a commitment to best practices in both software development and operations are essential traits that will contribute to the success in this role.