Security DevOps engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Jobot, so some details may not match this job. The employer's own page has the real description.

Overview

The Security DevOps Engineer at Jobot will play a pivotal role in enhancing the security posture throughout the software development lifecycle. This position involves designing and implementing DevSecOps practices that integrate security measures seamlessly into the development process. The candidate will collaborate with cross-functional teams to identify, analyze, and remediate security vulnerabilities while fostering a culture that prioritizes both application security and operational efficiency.

Job Responsibilities

• Implement and manage security controls in CI/CD pipelines.
• Conduct security assessments and vulnerability scans to identify risks and recommend remediation strategies.
• Work with development teams to integrate security best practices into the software development lifecycle.
• Monitor and respond to security incidents and threats in cloud and on-premise environments.
• Develop and maintain documentation related to security policies and procedures.
• Stay updated on security trends, threats, and vulnerabilities to continually improve security posture.
• Provide training and guidance on security awareness for technical and non-technical staff.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• At least 3 years of experience in cybersecurity or a related field.
• Strong understanding of cloud security principles and practices.
• Experience with DevOps tools such as Jenkins, GitLab CI, or CircleCI.
• Familiarity with security frameworks and standards such as OWASP, NIST, or CIS.
• Proficiency in programming/scripting languages such as Python, Bash, or Ruby.
• Certifications such as CISSP, CISM, or DevSecOps-related credentials are preferred.

Technologies & Tools

The Security DevOps Engineer will utilize a range of technologies and tools, including but not limited to AWS or Azure cloud services, Docker and Kubernetes for container orchestration, security tools like Snyk, Aqua Security, and various vulnerability management platforms. Proficiency in version control systems like Git and familiarity with Infrastructure as Code (IaC) tools such as Terraform or Ansible are also essential to ensure consistent deployment of secure infrastructure.

Ideal Candidates

The ideal candidate for the Security DevOps Engineer position will be proactive and detail-oriented, possessing strong analytical skills to evaluate potential security risks. They should have a collaborative mindset, working effectively across teams to advocate for security measures while respecting development agility. Excellent communication skills are essential to articulate complex security concepts to both technical and non-technical stakeholders. A passion for continuous improvement in security practices and a commitment to keeping pace with evolving technology trends will make someone a perfect fit for this role.