Security DevOps Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Jobot, so some details may not match this job. The employer's own page has the real description.

Overview

The Security DevOps Engineer at Jobot will play a critical role in designing and implementing security controls and integrating security practices into the DevOps pipeline. This position involves collaborating with cross-functional teams to ensure the secure deployment and maintenance of applications and infrastructure. The engineer will be responsible for identifying potential security vulnerabilities, addressing compliance requirements, and continuously monitoring for threats while promoting a culture of security within the organization.

Job Responsibilities

• Design and implement security measures throughout the DevOps lifecycle.
• Collaborate with development teams to integrate security into CI/CD pipelines.
• Perform regular security assessments, vulnerability scans, and penetration testing.
• Monitor application and network security events and respond to incidents.
• Ensure compliance with security policies, standards, and regulations.
• Conduct security training and awareness sessions for technical staff.
• Keep abreast of the latest security trends, threats, and technology solutions.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field.
• 3+ years of experience in a security-focused role within DevOps environments.
• Strong understanding of security frameworks (NIST, ISO 27001, etc.) and best practices.
• Proficiency in scripting languages such as Python, Bash, or PowerShell.
• Experience with CI/CD tools like Jenkins, GitLab CI, or Travis CI.
• Knowledge of cloud security principles and tools (AWS, Azure, GCP).
• Strong analytical and problem-solving skills.
• Relevant security certifications (CISSP, CEH, AWS Certified Security, etc.) are a plus.

Technologies & Tools

The Security DevOps Engineer will utilize a wide range of technologies and tools including cloud platforms (such as AWS, Azure, and Google Cloud), CI/CD pipelines (like Jenkins and GitHub Actions), security information and event management (SIEM) tools, intrusion detection systems (IDS), vulnerability scanners, and container security tools. Familiarity with configuration management tools such as Ansible or Terraform is also beneficial, as well as knowledge of container orchestration technologies like Kubernetes.

Ideal Candidates

Ideal candidates for the Security DevOps Engineer position will possess a strong blend of technical expertise, analytical thinking, and collaboration skills. They demonstrate a proactive approach to problem-solving and have a deep understanding of secure coding practices and principles. A successful candidate will be adaptable to evolving security challenges and willing to mentor others in security best practices. Excellent communication skills, both verbal and written, are essential for effectively conveying security concepts to non-technical stakeholders.