Security DevOps engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Jobot, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Security DevOps Engineer at Jobot will play a pivotal role in enhancing our security posture through the integration of security practices within our DevOps processes. This position requires a comprehensive understanding of both DevOps methodologies and information security principles. The ideal candidate will collaborate with software development, IT operations, and security teams to implement secure coding practices, automate security testing, and ensure compliance with security policies. This role offers an opportunity to impact our infrastructure and processes significantly while actively contributing to a culture of continuous improvement and security awareness.

Job Responsibilities

• Develop and implement security tools and best practices across the DevOps pipeline.
• Automate testing of security controls to minimize vulnerabilities and optimize the security posture.
• Collaborate with software development teams to integrate security throughout the software development lifecycle (SDLC).
• Monitor systems and respond to security incidents, performing root cause analysis and remediation.
• Stay current with the latest security vulnerabilities and enforce proactive measures to mitigate risks.
• Conduct security assessments and audits of environments, applications, and cloud infrastructure.
• Provide mentorship and training to teams on security awareness and best practices.
• Document security processes, incidents, and recommendations for improvement.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 3+ years of experience in DevOps, security engineering, or related fields.
• Strong understanding of CI/CD pipelines and automation tools such as Jenkins, CircleCI, or GitLab CI.
• Proficiency in scripting languages (Python, Go, Shell) for automation tasks.
• Experience with security tools such as SAST, DAST, and vulnerability management systems.
• Knowledge of cloud platforms (AWS, Azure, or GCP) and their associated security features.
• Understanding of compliance standards and regulations (GDPR, HIPAA, PCI-DSS).
• Relevant certifications such as CISSP, CISM, or AWS Certified Security Specialty are a plus.

Technologies & Tools

The Security DevOps Engineer will utilize a variety of technologies and tools to enhance security measures within the DevOps framework. Key tools include continuous integration and delivery platforms such as Jenkins and GitLab, security assessment tools like Snyk and Aqua Security, cloud service providers such as AWS and Azure, and configuration management tools like Terraform and Ansible. Familiarity with containerization technologies like Docker and orchestration platforms like Kubernetes will also be essential for maintaining secure environments.

Ideal Candidates

Ideal candidates for this position will possess a strong analytical mindset and a proactive approach to problem-solving. They should have exceptional communication skills, enabling effective collaboration across multiple teams while articulating security risks and best practices clearly. A genuine passion for security and a commitment to staying updated on the latest industry trends and developments are essential qualities. Candidates should also demonstrate a strong sense of ownership and accountability, with the ability to prioritize and manage multiple tasks in a fast-paced environment.