Security DevOps Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Jobot, so some details may not match this job. The employer's own page has the real description.

Overview

The Security DevOps Engineer at Jobot will play a crucial role in integrating security practices into the DevOps processes. This position entails working collaboratively with software engineering, security, and operations teams to ensure the implementation and maintenance of secure software deployments and applications. As part of this role, the engineer will be responsible for identifying security vulnerabilities, implementing security tools, and promoting a security-first culture across the development lifecycle while streamlining workflows and automating security processes.

Job Responsibilities

• Design, implement, and maintain security controls and processes throughout the software development lifecycle.
• Identify and mitigate vulnerabilities using various security tools and practices.
• Develop and automate security testing frameworks to integrate into CI/CD pipelines.
• Collaborate with software engineers to define and implement cloud security best practices.
• Monitor security alerts and incidents, responding to and investigating security breaches as needed.
• Conduct risk assessments and recommend security enhancements and relevant tools.
• Educate and train teams on secure coding practices and incident response procedures.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 4+ years of experience in a DevOps or security engineering role.
• Strong knowledge of cloud security principles, especially in AWS, Azure, or Google Cloud.
• Experience with security tools such as SAST, DAST, and vulnerability scanning platforms.
• Proficiency in scripting languages (e.g., Python, Bash) to automate security tasks.
• Understanding of CI/CD tools (e.g., Jenkins, GitLab CI) and their integration with security practices.
• Prior experience with incident response and threat modeling.
• Relevant security certifications (CISSP, CISM, etc.) are a plus.

Technologies & Tools

The Security DevOps Engineer will utilize a variety of technologies and tools including cloud platforms (AWS, Azure, Google Cloud), configuration management tools (Ansible, Puppet), containerization technologies (Docker, Kubernetes), and security-specific tools like OWASP ZAP, Veracode, and Snyk, among others. Familiarity with version control systems such as Git will also be essential in ensuring code security throughout the development process.

Ideal Candidates

The ideal candidate for the Security DevOps Engineer position will possess a proactive mindset and a strong passion for security. They should demonstrate excellent analytical and problem-solving skills, as well as the ability to work collaboratively across diverse teams. Strong communication skills are essential for fostering a culture of security within the organization, alongside an eagerness to stay updated on emerging threats and trends in the cybersecurity landscape. A commitment to best practices in both security and development will set successful candidates apart in this dynamic environment.