Security DevOps Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Jobot, so some details may not match this job. The employer's own page has the real description.

Job Overview

Jobot is seeking a proficient Security DevOps Engineer to enhance our software development and deployment processes while ensuring robust security practices are integrated throughout the lifecycle. The ideal candidate will be responsible for automating security measures, implementing best practices, and collaborating with development teams to create a secure environment. This individual will leverage their expertise in both security and DevOps methodologies to foster continuous integration and deployment while safeguarding sensitive data and applications.

Job Responsibilities

• Design, implement, and monitor security controls within the DevOps pipeline.
• Automate security assessments and vulnerability scanning processes.
• Conduct risk assessments and engage in threat modeling activities.
• Collaborate with cross-functional teams to ensure adherence to security best practices.
• Develop and maintain security policies, procedures, and standards.
• Investigate and respond to security incidents, helping to mitigate risks in real-time.
• Provide training and support to development teams on secure coding practices.
• Stay updated with the latest security trends, vulnerabilities, and compliance requirements.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• Minimum of 3 years of experience in a security-focused DevOps role.
• Strong understanding of security frameworks such as NIST, CIS, or ISO.
• Proficient in scripting languages (e.g., Python, Bash) and configuration management tools (e.g., Ansible, Puppet).
• Experience with CI/CD tools (e.g., Jenkins, GitLab CI) and containerization (e.g., Docker, Kubernetes).
• Knowledge of cloud security practices and familiarity with services from major cloud providers (e.g., AWS, Azure, GCP).
• Relevant certifications such as Certified Information Systems Security Professional (CISSP) or Certified Cloud Security Professional (CCSP) are a plus.

Technologies & Tools

The Security DevOps Engineer will work with a variety of technologies and tools, including but not limited to: cloud platform services (AWS, Azure, GCP), container orchestration tools (Kubernetes, Docker), CI/CD tools (Jenkins, GitLab CI), and security tools such as Snyk, Aqua Security, and Fortify. Knowledge of infrastructure as code (IaC) tools such as Terraform or CloudFormation will also be essential for this role.

Ideal Candidates

Ideal candidates for the Security DevOps Engineer position will possess a balanced combination of technical expertise and soft skills. They will be detail-oriented and possess strong analytical skills to assess and mitigate security risks effectively. A collaborative mindset is essential, as this role requires close interaction with diverse teams. Additionally, candidates should show a commitment to continuous learning and staying abreast of evolving technologies and security threats, ensuring our practices are always up-to-date and effective.