Security DevOps engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Jobot, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Security DevOps Engineer at Jobot plays a critical role in implementing and maintaining robust security practices throughout the software development lifecycle. This position requires a proactive approach to integrating security into DevOps processes, ensuring that applications are designed, developed, and deployed in a secure manner. The ideal candidate will collaborate with cross-functional teams to identify vulnerabilities, implement security tooling, and promote a culture of security awareness within the organization.

Job Responsibilities

• Design and implement security solutions within the DevOps pipeline, ensuring security is integrated at every stage of software development.
• Perform regular security assessments and vulnerability scans to identify weaknesses in applications and infrastructure.
• Collaborate with development, operations, and security teams to establish and maintain security standards, best practices, and guidelines.
• Develop and automate security testing tools and processes to enhance the overall security posture.
• Monitor and respond to security incidents, ensuring effective communication and resolution of issues.
• Provide training and guidance to development and operations teams on secure coding practices and security awareness.
• Stay up-to-date with the latest security threats, technologies, and best practices to continually improve security measures.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 3+ years of experience in Security Engineer, DevOps Engineer, or a related role.
• Strong understanding of security frameworks and methodologies, including OWASP, NIST, and CIS.
• Experience with cloud platforms such as AWS, Azure, or Google Cloud.
• Familiarity with containerization technologies (e.g., Docker, Kubernetes) and their security implications.
• Proficiency in programming languages such as Python, Bash, or JavaScript for automation purposes.
• Knowledge of CI/CD tools (e.g., Jenkins, GitLab CI, CircleCI) and security integration practices.
• Strong analytical and problem-solving skills, with the ability to work independently as well as part of a team.

Technologies & Tools

In this role, the Security DevOps Engineer will leverage a variety of technologies and tools to ensure the security of applications and infrastructure. Key tools may include security information and event management (SIEM) systems, vulnerability scanning tools (e.g., Nessus, Qualys), configuration management tools (e.g., Ansible, Chef), and container security tools (e.g., Aqua Security, Twistlock). Familiarity with cloud security tools specific to AWS and Azure, along with CI/CD platforms, is essential for effective integration of security measures throughout the DevOps pipeline.

Ideal Candidates

The ideal candidates for the Security DevOps Engineer position are proactive, detail-oriented individuals who possess a strong passion for cybersecurity and DevOps practices. They demonstrate a willingness to learn and adapt to new technologies and methodologies while maintaining a collaborative spirit. Strong communication skills are essential, as the candidate will be responsible for training team members and promoting security awareness. Additionally, a mindset for continuous improvement and the ability to work effectively in a fast-paced environment will make them a valuable asset to Jobot.