Remote Mid-Level DevSecOps Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker US, so some details may not match this job. The employer's own page has the real description.

Job Overview

RemoteWorker US is seeking a qualified Mid-Level DevSecOps Engineer who will be responsible for integrating security practices within the DevOps process. The successful candidate will collaborate with our development, operations, and security teams to enhance our software development lifecycle by embedding security controls and practices. This role requires a proactive mindset to identify potential security risks, implement best practices, and advocate for a security-first culture across the organization. The engineer will also assist in automating security testing and monitoring, ensuring compliance and performance efficiencies.

Job Responsibilities

• Integrate security tools and practices into the CI/CD pipeline.
• Perform security assessments and vulnerability scans on applications and infrastructure.
• Develop and automate security testing procedures.
• Collaborate with developers and system administrators to manage security incidents.
• Ensure compliance with security standards and best practices.
• Assist in the creation and maintenance of security documentation.
• Conduct training and awareness programs for staff on security topics.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• 3+ years of experience in a DevSecOps, DevOps, or security engineering role.
• Proficient in scripting languages such as Python, Bash, or PowerShell.
• Experience with CI/CD tools like Jenkins, GitLab CI, or CircleCI.
• Familiarity with cloud service providers such as AWS, Azure, or GCP.
• Understanding of security frameworks and compliance standards (e.g., NIST, ISO 27001).
• Strong analytical and problem-solving skills.

Technologies & Tools

The Mid-Level DevSecOps Engineer will work with a variety of tools and technologies that include but are not limited to Jenkins for CI/CD, Docker and Kubernetes for containerization and orchestration, Terraform for infrastructure as code (IaC), and various security tools such as Snyk, OWASP ZAP, and Nessus. Familiarity with cloud native technologies and environments will also be essential to effectively manage security across cloud infrastructures.

Ideal Candidates

Ideal candidates for this position will possess a strong security mindset, with an inclination towards proactive risk management. They should exhibit excellent communication and collaboration skills, enabling them to work effectively with cross-functional teams. A commitment to continuous learning and adapting to new technologies within the security landscape is crucial. Furthermore, a passion for embedding security into the development process and creating a culture of awareness among peers will significantly contribute to the success in this role.