Security DevOps Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Jobot, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Security DevOps Engineer at Jobot will play a critical role in enhancing our security posture while integrating development and operations workflows. The successful candidate will collaborate closely with development, testing, and operations teams to build robust and secure deployments, ensuring that security practices are embedded throughout the application lifecycle. This position requires a combination of DevOps practices and security expertise, aiming to create and maintain a culture of security awareness across the organization while minimizing vulnerabilities.

Job Responsibilities

• Design and implement secure development processes, integrating security checks into CI/CD pipelines.
• Conduct regular security assessments and vulnerability testing to identify and mitigate threats.
• Monitor network and system security configurations and ensure compliance with security standards.
• Collaborate with DevOps teams to automate security controls and procedures.
• Respond to security incidents and conduct post-incident analyses to identify root causes and remediation plans.
• Stay updated with the latest security threats and vulnerability management techniques.
• Provide training and guidance to staff on best security practices and protocol adherence.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Minimum of 3 years of experience in a DevOps role with a focus on security.
• Strong understanding of security practices in cloud environments (e.g., AWS, Azure, GCP).
• Experience with configuration management tools (e.g., Ansible, Puppet, Chef).
• Proficiency in scripting languages (e.g., Python, Bash) to automate security tasks.
• Familiarity with security frameworks and compliance standards (e.g., NIST, ISO 27001).
• Relevant security certifications (e.g., CISSP, CISM, Security+) are a plus.

Technologies & Tools

The position requires expertise in a variety of technologies and tools including, but not limited to, Docker, Kubernetes, Terraform, Jenkins, AWS CloudFormation, and various security tooling. Familiarity with threat modeling tools, security information and event management (SIEM) solutions, and monitoring tools will also be essential for ensuring effective security practices throughout software development and deployment.

Ideal Candidates

Ideal candidates are proactive problem solvers with a keen understanding of both development and operational processes. They possess a strong security mindset and demonstrate a continuous desire to learn about emerging threats and mitigation strategies. Excellent communication skills and the ability to work collaboratively across teams are essential. The best fit embraces innovation and change, supporting the organization's mission to integrate security seamlessly into the development workflow.