Remote DevSecOps Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Piper Companies, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Remote DevSecOps Engineer at Piper Companies will play a crucial role in enhancing the security posture of our software development and operational environments. This position demands a strong collaboration with software developers, IT operations, and security teams to implement security best practices across the entire software development lifecycle (SDLC). The ideal candidate will design, implement, and maintain security tools and practices that integrate seamlessly into DevOps processes, ensuring that security features and controls are embedded in application and infrastructure deployments. Additionally, this role will involve monitoring, managing, and responding to security incidents, as well as continually assessing and improving security measures.

Job Responsibilities

• Design and implement security measures within CI/CD pipelines and cloud environments.
• Collaborate with development teams to integrate security practices into the software design and deployment processes.
• Conduct vulnerability assessments and penetration testing on applications and infrastructure.
• Monitor security incidents and threats, developing appropriate responses and mitigation strategies.
• Maintain and enhance security monitoring tools and processes to ensure compliance with industry standards.
• Provide training and guidance to engineering teams on security best practices.
• Develop and enforce security policies, procedures, and standards within the cloud infrastructure.
• Stay updated on the latest security trends, tools, and technologies to continuously improve security posture.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity or a relevant field.
• Proven experience as a DevSecOps Engineer or in a similar security-focused role.
• Strong understanding of DevOps practices and concepts, along with hands-on experience in CI/CD methodologies.
• Proficiency in scripting languages such as Python, Bash, or similar.
• Experience with cloud service providers (AWS, Azure, or Google Cloud) and associated security tools.
• Familiarity with security frameworks (NIST, CIS, or ISO 27001) and compliance standards (GDPR, HIPAA, etc.).
• Relevant security certifications (CISSP, CISM, CEH, or other equivalent) are preferred.
• Strong analytical and problem-solving skills with attention to detail.

Technologies & Tools

The Remote DevSecOps Engineer will work extensively with a variety of technologies and tools including, but not limited to, AWS, Azure DevOps, Jenkins, GitLab CI, Terraform, Ansible, Docker, Kubernetes, OWASP tools, and various vulnerability scanning tools. Knowledge of security information and event management (SIEM) platforms and intrusion detection/prevention systems (IDPS) will be essential in fulfilling the responsibilities of this position.

Ideal Candidates

Ideal candidates for the Remote DevSecOps Engineer role will possess strong communication and collaboration skills, enabling them to work effectively within a multidisciplinary team. They should be proactive in identifying security vulnerabilities and initiating corrective actions. A strong desire to learn and adapt to evolving technologies is essential, alongside a passion for implementing secure solutions that drive organizational efficiency. Furthermore, a positive attitude towards problem-solving and the ability to work independently in a remote environment will contribute significantly to their success in this position.