Security DevOps Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Jobot, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Security DevOps Engineer at Jobot plays a critical role in integrating security practices into the DevOps pipeline, ensuring that the company's applications and infrastructure are secure throughout the software development lifecycle. This position involves automating security testing, managing threat models, conducting vulnerability assessments, and providing guidance on security best practices to various teams. The ideal candidate will collaborate closely with both development and operations teams to implement secure coding solutions and mitigate potential risks effectively.

Job Responsibilities

• Integrate security measures into the DevOps lifecycle, ensuring security is a foundational aspect of application development and deployment.
• Implement automated security testing tools and processes within CI/CD pipelines.
• Conduct threat modeling and vulnerability assessments to identify potential security weaknesses.
• Collaborate with cross-functional teams to promote security-centric design patterns and best practices.
• Monitor and respond to security incidents and breaches, managing investigations and remediation.
• Maintain up-to-date knowledge of the latest security trends and industry developments.
• Develop and deliver training sessions and materials to raise security awareness among team members.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 3+ years of experience in DevOps or related positions, with a strong focus on security.
• Proficient in scripting/programming languages such as Python, Java, or Ruby.
• Experience with security tooling, including but not limited to SIEM, static code analysis, and dynamic application testing tools.
• Understanding of cloud security principles and experience with platforms like AWS, Azure, or Google Cloud.
• Familiarity with regulatory standards such as GDPR, HIPAA, or PCI-DSS.
• Industry certifications such as CISSP, CISA, or CompTIA Security+ are preferred.

Technologies & Tools

The Security DevOps Engineer position utilizes a variety of technologies and tools to enhance security within the development and operational processes. Key technologies include AWS for cloud infrastructure, Docker for containerization, Kubernetes for orchestration, along with security tools like OWASP ZAP, Nessus, and Snort. Proficiency in CI/CD platforms such as Jenkins or GitLab CI is essential for automated security integration.

Ideal Candidates

Ideal candidates for the Security DevOps Engineer role at Jobot exhibit a strong balance of technical acumen and collaboration skills. They are proactive problem solvers who thrive in fast-paced environments and possess a deep understanding of security vulnerabilities and remediation strategies. A keen interest in continuous improvement and staying abreast of industry trends is essential. Furthermore, successful candidates demonstrate excellent communication skills, enabling them to effectively convey complex security concepts to both technical and non-technical stakeholders.