Remote - DevSecOps Security Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by TechFetch.com - On Demand Tech Workforce hiring platform, so some details may not match this job. The employer's own page has the real description.

Overview

The Remote - DevSecOps Security Engineer at TechFetch.com will be instrumental in integrating security practices into our development and operations processes. This role is centered around enhancing the overall security posture of our platforms while promoting a culture of security awareness within the team. The ideal candidate will work collaboratively with cross-functional teams to identify vulnerabilities, enforce compliance, and implement security solutions that align with industry best practices and compliance regulations.

Job Responsibilities

• Design and implement security architecture across DevOps processes to ensure secure software development.
• Conduct threat modeling and risk assessments to identify and mitigate vulnerabilities in applications and infrastructure.
• Automate security testing and compliance workflows within CI/CD pipelines.
• Monitor and analyze security incidents, responding rapidly to threats and implementing remedial measures.
• Provide guidance and training to development teams on secure coding practices.
• Stay updated with the latest security trends, vulnerabilities, and regulatory changes affecting the industry.
• Collaborate with IT and product teams to establish security policies and procedures.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 3 years of experience in DevSecOps, cybersecurity, or related roles.
• Strong knowledge of security best practices and compliance frameworks (e.g., OWASP, NIST, ISO 27001).
• Experience with security tools such as SAST, DAST, and IAST.
• Proficiency in scripting languages (e.g., Python, Bash) for automation of security processes.
• Solid understanding of cloud security models (AWS, Azure, GCP) and container technologies (Docker, Kubernetes).
• Certifications such as CISSP, CISM, or AWS Certified Security – Specialty are highly desirable.

Technologies & Tools

The position of DevSecOps Security Engineer will involve the use of various technologies and tools designed to protect application security and infrastructure. Key tools may include security testing solutions like SAST and DAST tools, CI/CD pipeline tools such as Jenkins or GitLab, configuration management tools like Terraform, and cloud platforms such as AWS, Azure, or GCP. Familiarity with containerization technologies such as Docker and orchestration frameworks like Kubernetes is also essential for streamlining security processes in cloud environments.

Ideal Candidates

The ideal candidates for this role are proactive individuals who possess a strong analytical mindset and a passion for cybersecurity. They should demonstrate excellent problem-solving skills and a commitment to fostering a security-centered culture within the organization. Exceptional communication skills are essential for effectively collaborating with various teams and delivering security training and awareness programs. A self-starter attitude and the ability to adapt to an evolving technology landscape are crucial for success in this position.