Security Engineer, DevSecOps | Remote US

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Coalfire, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Security Engineer, DevSecOps will play a critical role in integrating security practices into the software development lifecycle of our organization. This position involves collaborating with development, operations, and security teams to ensure that security is maintained throughout all stages of application development and deployment. The engineer will be responsible for identifying vulnerabilities, implementing security measures, and ensuring compliance with industry standards, all while advocating for best practices in secure coding and infrastructure management.

Job Responsibilities

• Integrate security practices into CI/CD pipelines to enhance application security.
• Conduct risk assessments and vulnerability analyses on applications and infrastructure.
• Develop and maintain security tools and scripts to automate security tasks.
• Collaborate with development teams to ensure secure coding practices are followed.
• Monitor and respond to security incidents, conducting root cause analysis as necessary.
• Provide training and guidance to staff on security best practices.
• Stay updated on security threats and advancements relevant to DevOps environments.
• Assist in compliance audits and ensure adherence to security policies and standards.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or related field.
• Minimum 3 years of experience in a security engineering role, preferably within a DevSecOps environment.
• Strong knowledge of security frameworks, such as NIST, OWASP, and ISO standards.
• Proficiency in using security tools such as static and dynamic analysis tools.
• Experience with programming and scripting languages (e.g., Python, Java, Bash).
• Familiarity with cloud security best practices, particularly in AWS or Azure.
• Relevant security certifications (e.g., CISSP, CEH, Security+) are highly desired.

Technologies & Tools

The Security Engineer will utilize a variety of technologies and tools in their role, including but not limited to cloud platforms such as AWS and Azure, containerization technologies like Docker and Kubernetes, and security tools for vulnerability management and penetration testing. Familiarity with infrastructure as code (IaC) tools, such as Terraform or Ansible, is also beneficial to implement secure configurations and automate security controls in infrastructure setups.

Ideal Candidates

The ideal candidate for the Security Engineer, DevSecOps position is someone who possesses a proactive mindset, demonstrating the ability to think critically about security. They should exhibit strong interpersonal skills to effectively collaborate with diverse teams while also being detail-oriented to manage security frameworks effectively. A commitment to continuous learning and staying abreast of emerging threats and technologies is crucial to ensure the organization remains secure in an evolving landscape. Additionally, a passion for fostering a security-first culture within the organization is highly valued.