Remote DevSecOps Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Dice, so some details may not match this job. The employer's own page has the real description.

Overview

The Remote DevSecOps Engineer at Dice will play a pivotal role in embedding security practices into the Software Development Life Cycle (SDLC) while ensuring the efficiency and reliability of automated systems. The ideal candidate will collaborate closely with development and operations teams to enhance the security posture of applications and infrastructure, implement security tools, and develop secure coding practices. This role is critical in fostering a culture of security awareness and compliance across all levels of the organization.

Job Responsibilities

• Integrate security into CI/CD pipelines to streamline secure software delivery.
• Develop and maintain security policies, standards, and procedures.
• Conduct risk assessments and vulnerability assessments to identify potential threats.
• Implement security automation tools and technologies to improve threat detection and response.
• Provide training and support to development teams on secure coding practices.
• Monitor and respond to security incidents, conducting root cause analysis and ensuring remediation.
• Stay abreast of the latest security trends and technologies to continuously improve security measures.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Minimum of 5 years of experience in DevOps, security engineering, or a related field.
• Strong understanding of security practices across various cloud environments (AWS, Azure, or GCP).
• Proficient in scripting languages (Python, Bash, etc.) and automation tools (Ansible, Terraform, etc.).
• Experience with security testing tools, such as SAST, DAST, and IAST solutions.
• Knowledge of regulatory frameworks and compliance standards (GDPR, PCI-DSS, etc.).
• Certifications in security (CISSP, CISM, or similar) are preferred.

Technologies & Tools

The Remote DevSecOps Engineer will be expected to leverage a variety of technologies and tools to ensure security within development and operations workflows. This includes proficiency with cloud platforms such as AWS and Azure, CI/CD tools like Jenkins or GitLab, infrastructure as code tools including Terraform and Ansible, as well as security solutions like Snyk, Veracode, or Aqua Security for container security. Familiarity with monitoring and incident response tools is also essential for maintaining the security of applications and infrastructure.

Ideal Candidates

Ideal candidates for the Remote DevSecOps Engineer position will possess a strong commitment to security with a proactive mindset towards identifying and mitigating risks. They will demonstrate effective communication and collaboration skills, enabling productive partnerships with diverse teams. The ability to stay current with evolving security threats and a passion for continuous improvement in processes and technologies are also essential traits. Successful candidates will thrive in a fast-paced, remote work environment, managing multiple priorities while delivering high-quality results.