Remote DevSecOps Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Piper Companies, so some details may not match this job. The employer's own page has the real description.

Job Overview

Piper Companies is seeking a highly skilled Remote DevSecOps Engineer to strengthen our application development and security lifecycle. This role involves collaborating with cross-functional teams to enhance software security and automate deployment pipelines. The ideal candidate will focus on integrating security practices within the DevOps processes, thereby enabling secure and seamless software delivery while maintaining compliance with best practices and industry standards.

Job Responsibilities

• Design and implement secure CI/CD pipelines by integrating security practices in the development life cycle.
• Collaborate with development, operations, and security teams to identify and mitigate security vulnerabilities in applications.
• Conduct security assessments and code reviews; recommend remediation actions for identified security risks.
• Create and maintain automation scripts for deployment and infrastructure as code (IaC).
• Monitor and analyze system performance to ensure a reliable and secure environment.
• Develop and maintain security documentation and best practice guidelines.
• Stay updated on current security threats and trends to adapt the organization's security posture accordingly.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or related field.
• 3+ years of experience in DevOps or DevSecOps roles.
• Strong understanding of CI/CD tools such as Jenkins, GitLab CI, or CircleCI.
• Proficient in scripting languages, such as Python, Bash, or PowerShell.
• Experience with security tools such as SAST, DAST, and vulnerability scanning.
• Familiarity with cloud platforms (AWS, Azure, GCP) and relevant security practices.
• Certifications in security (CISSP, CEH, or equivalent) are a plus.

Technologies & Tools

The successful candidate will utilize a variety of technologies and tools including but not limited to AWS or Azure for cloud infrastructure, Jenkins or GitLab for CI/CD processes, Docker and Kubernetes for container orchestration, as well as security tools such as OWASP ZAP and SonarQube for vulnerability scanning and code quality analysis.

Ideal Candidates

Ideal candidates will possess a proactive mindset with a strong aptitude for problem-solving and critical thinking. They should demonstrate excellent communication skills to effectively collaborate with diverse teams and stakeholders. Adaptability and a commitment to continuous learning are essential in keeping up with the rapidly evolving field of application security and DevOps methodologies. A strong attention to detail and an unwavering dedication to quality and security best practices are paramount in this role.