Remote Security Engineer DevSecOps

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Jobs via Dice, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Remote Security Engineer in a DevSecOps environment plays a vital role in integrating security practices within the organization’s software development and deployment pipelines. This position is responsible for identifying vulnerabilities, implementing security measures, and ensuring compliance with industry standards throughout the software development lifecycle. The successful candidate will also collaborate with cross-functional teams to instill a security-first mindset and optimize security tools to enhance the overall security posture of the organization.

Job Responsibilities

• Conduct security assessments and audits to identify vulnerabilities in the development pipeline.
• Implement automated security testing tools to ensure early detection of security issues.
• Collaborate with developers to embed security practices within DevOps workflows.
• Develop and maintain security policies, procedures, and standards for software development.
• Monitor security compliance and provide recommendations for improvements.
• Respond to security incidents and conduct post-incident reviews to strengthen security measures.
• Provide security training and awareness programs for team members

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 3+ years of experience in security engineering or a related role, preferably within a DevSecOps framework.
• Strong knowledge of security practices, principles, and methodologies.
• Experience with security tools and technologies such as SIEM, DAST, and SAST.
• Familiarity with programming or scripting languages such as Python, Bash, or JavaScript.
• Relevant security certifications (e.g., CISSP, CISM, CEH) are preferred.
• Excellent analytical and problem-solving skills.

Technologies & Tools

This role will involve various technologies and tools pivotal for implementing security measures within DevSecOps. Familiarity with cloud platforms (AWS, Azure, or Google Cloud), CI/CD tools (Jenkins, GitLab CI), containerization technologies (Docker, Kubernetes), and security automation frameworks will be essential. Additionally, experience with security compliance frameworks such as ISO 27001 and GDPR will also enhance the candidate's effectiveness in this role.

Ideal Candidates

The ideal candidate for this position is a proactive and detail-oriented security professional with a passion for integrating security within agile methodologies. They should possess strong communication skills to effectively collaborate with both technical and non-technical stakeholders. A genuine interest in staying current with cybersecurity trends and best practices, accompanied by a problem-solving mindset, is crucial for success in this role. The candidate should also demonstrate a commitment to fostering a security-first culture across the organization.