Remote DevSecOps Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Piper Companies, so some details may not match this job. The employer's own page has the real description.

Overview

The Remote DevSecOps Engineer at Piper Companies will be responsible for integrating security practices within the DevOps process. This role requires a deep understanding of both development and operational practices, ensuring that security is integrated and automated throughout the software development life cycle. The successful candidate will collaborate closely with software developers, system operators, and other IT staff to streamline the deployment process while maintaining rigorous security standards.

Job Responsibilities

• Implement and manage continuous integration and continuous deployment (CI/CD) pipelines that incorporate security assessments.
• Conduct security assessments throughout the software development life cycle to identify vulnerabilities in applications, infrastructure, and services.
• Develop and maintain security best practices and guidelines for development teams.
• Collaborate with development and operations teams to automate security controls in the deployment pipeline.
• Monitor system and application logs for potential security breaches and recommend remediation steps as necessary.
• Stay current with emerging security technologies and trends, and assess their applicability to the current environment.
• Provide training and support to development teams on secure coding practices and security tools.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or related field.
• 3+ years of experience in DevSecOps, software development, or a related field.
• Proficiency in scripting languages such as Python, Shell, or Perl.
• Experience with automation tools and CI/CD pipelines (e.g., Jenkins, GitLab CI/CD, CircleCI).
• Strong understanding of security practices and frameworks, including OWASP, NIST, and ISO/IEC 27001.
• Hands-on experience with cloud platforms (e.g., AWS, Azure, Google Cloud Platform).
• Familiarity with containerization and orchestration technologies (e.g., Docker, Kubernetes).
• Security certifications such as CISSP, CEH, or CISM are a plus.

Technologies & Tools

The Remote DevSecOps Engineer will work extensively with technologies and tools such as AWS, Docker, Kubernetes, Jenkins, Terraform, Git, and various security assessment tools. A strong familiarity with CI/CD practices and infrastructure as code will be essential for effectively integrating security measures throughout the development process.

Ideal Candidates

Ideal candidates for this position will possess a proactive mindset with a strong commitment to security and quality in software development. They should be excellent communicators, capable of articulating complex security concepts to both technical and non-technical audiences. A collaborative spirit and the ability to work effectively in a remote team environment are essential. Candidates should also demonstrate a passion for staying up-to-date with the latest industry trends and a willingness to adopt and experiment with new technologies to enhance security practices.