Remote Lead DevSecOps Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Prosum, so some details may not match this job. The employer's own page has the real description.

Overview

The Remote Lead DevSecOps Engineer at Prosum will be responsible for integrating security practices into the DevOps process, ensuring that software and systems are developed, released, and maintained with a strong emphasis on security. The role demands a strategic thinker who can leverage advanced technology and best practices to cultivate a culture of security at all levels of the organization. This position involves team leadership, process improvement, and collaboration across various departments to enhance the security posture of our applications and infrastructure.

Job Responsibilities

• Develop and implement security policies, processes, and standards that align with industry best practices.
• Lead the design and implementation of automated security testing tools and practices within the CI/CD pipeline.
• Collaborate with development and operations teams to ensure secure coding practices are followed.
• Conduct regular security assessments and vulnerability scans on applications and infrastructure.
• Oversee incident response, investigation, and recovery efforts related to security breaches.
• Provide training and support to development and operations teams on security best practices.
• Stay current with emerging threats and technologies related to application and infrastructure security.
• Serve as the primary liaison for security audits and compliance assessments.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Minimum of 5 years of experience in DevSecOps, security engineering, or a related discipline.
• Strong proficiency in CI/CD tools and practices, along with solid scripting skills (Python, Bash, etc.).
• Experience with security tools such as SAST, DAST, IAST, and vulnerability management solutions.
• In-depth knowledge of cloud security architectures and practices (AWS, Azure, GCP).
• Certifications such as Certified Information Systems Security Professional (CISSP) or Certified DevSecOps Engineer (CDSE) are preferred.
• Excellent problem-solving skills and the ability to work independently in a remote environment.

Technologies & Tools

The Lead DevSecOps Engineer will utilize a variety of technologies and tools, including but not limited to, Git, Jenkins, Docker, Kubernetes, Terraform, and various security tools for static and dynamic application security testing (SAST and DAST). Familiarity with cloud platforms such as AWS, Azure, or GCP is essential, as these technologies play a significant role in the execution of secure DevOps practices in our infrastructure.

Ideal Candidates

The ideal candidate for this position will possess strong leadership skills and a proactive approach to problem-solving. They should have a passion for security and DevOps, as well as a strong commitment to continuous learning and improvement. Excellent communication skills and the ability to collaborate effectively with cross-functional teams are essential. Candidates should demonstrate a keen analytical mindset, enabling them to identify risks and implement appropriate solutions swiftly.