Remote DevSecOps Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Get It - Professional Services, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Remote DevSecOps Engineer at Get It - Professional Services will be responsible for integrating security practices within the DevOps process. This role involves collaborating with development, operations, and security teams to streamline the development lifecycle while enhancing security protocols and frameworks. The engineer will apply technical expertise to automate security processes, implement risk assessments, and ensure compliance across the software development lifecycle. The ideal candidate will embody the principles of DevSecOps to foster a culture of shared responsibility for security across all teams.

Job Responsibilities

• Design and implement continuous integration and continuous deployment (CI/CD) pipelines that incorporate security best practices.
• Conduct vulnerability assessments and threat modeling to identify security weaknesses in applications and infrastructure.
• Collaborate with cross-functional teams to integrate security into the software development lifecycle.
• Automate security testing processes and integrate into existing workflows.
• Provide guidance and training to development and operations teams on secure coding practices.
• Monitor systems for security breaches or intrusions and respond to incidents effectively.
• Stay current with emerging security threats and technologies to ensure compliance and enhance security measures.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 3 years of experience in DevOps, security engineering, or related roles.
• Proficiency in scripting languages such as Python, Bash, or similar.
• Experience with security tools (e.g., SAST, DAST, IAST, vulnerability management tools).
• Strong knowledge of cloud platforms (AWS, Azure, GCP) and associated security practices.
• Familiarity with containerization technologies (Docker, Kubernetes) and infrastructure as code (Terraform, Ansible).
• Solid understanding of networking and security protocols.

Technologies & Tools

The Remote DevSecOps Engineer position will utilize a variety of technologies and tools to effectively manage security within the DevOps framework. Key technologies include CI/CD platforms such as Jenkins and GitLab, cloud infrastructure tools like AWS CloudFormation and Azure DevOps, along with security tools such as OWASP ZAP, SonarQube, and Docker for containerization. Familiarity with version control systems like Git will also be essential for maintaining code integrity and facilitating effective collaboration.

Ideal Candidates

The ideal candidates for the Remote DevSecOps Engineer position will be proactive problem-solvers who are passionate about cybersecurity and DevOps practices. They should possess strong analytical skills and have a keen attention to detail, enabling them to identify and mitigate risks effectively. Excellent communication skills are essential for collaborating with diverse teams and promoting a security-conscious culture. Candidates should be adaptable to fast-paced environments, demonstrating the ability to learn and apply new technologies as needed while being committed to continuous improvement in security practices.