Security DevOps Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Jobot, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Security DevOps Engineer will play a pivotal role at Jobot by integrating security practices into the DevOps workflow, ensuring that secure coding practices and security monitoring are embedded throughout the software development lifecycle. This position will involve collaborating closely with development, operations, and security teams to implement and maintain security controls, automate security testing, and foster a culture of security awareness. The ideal candidate will have a strong understanding of both security protocols and DevOps practices to help enhance the organization's security posture while maintaining efficiency in deployment and operations.

Job Responsibilities

• Collaborate with development and operations teams to integrate security practices across the CI/CD pipeline.
• Implement automated security testing tools to identify and remediate vulnerabilities in the application and infrastructure.
• Conduct risk assessments and security audits to ensure compliance with industry standards and security regulations.
• Develop and maintain security policies, procedures, and documentation.
• Monitor and respond to security incidents, providing incident response and forensic analysis as necessary.
• Provide training and support to development teams on secure coding practices and security tools.
• Stay abreast of the latest security threats, trends, and technologies to continually improve security posture.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 3+ years of experience in a DevOps or security role within a software development environment.
• Proficiency in scripting languages such as Python, Bash, or PowerShell.
• Experience with automation tools like Jenkins, GitLab CI, or CircleCI.
• Strong understanding of cloud security practices and experience with AWS, Azure, or Google Cloud Platform.
• Familiarity with security frameworks such as OWASP, NIST, or ISO 27001.
• Knowledge of container security and orchestration technologies, such as Docker and Kubernetes.
• Certifications such as CEH, CISSP, or AWS Certified Security Specialty are a plus.

Technologies & Tools

The Security DevOps Engineer will utilize a variety of technologies and tools to ensure the security and efficiency of the development process. This includes, but is not limited to, cloud platforms such as AWS and Google Cloud, containerization tools like Docker and Kubernetes, automation and CI/CD tools like Jenkins and GitLab CI, as well as security-specific tools for vulnerability scanning, static and dynamic application security testing (SAST/DAST), and infrastructure as code (IaC) security solutions.

Ideal Candidates

The ideal candidate for the Security DevOps Engineer position is an individual who thrives in a fast-paced environment and possesses a blend of strong technical skills and a proactive attitude towards security. Successful candidates will exhibit exceptional problem-solving skills, a keen eye for detail, and the ability to communicate complex security concepts to non-technical stakeholders. A passion for continuous learning and a commitment to enhancing security practices within an organization will further distinguish the right individual for this role.