Senior DevSecOps Engineer | 100% Remote WFH Role

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Get It - Professional Services, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Senior DevSecOps Engineer at Get It - Professional Services will play a crucial role in integrating security practices within the DevOps process. This position entails collaborating with cross-functional teams to design, implement, and manage secure development and deployment pipelines. The incumbent will ensure that security is considered at every stage of the software development lifecycle, thereby enhancing the organization’s overall security posture while improving efficiency in development operations. The role is fully remote, allowing for a flexible work environment while requiring strong communication skills to coordinate effectively with team members and stakeholders.

Job Responsibilities

• Design and implement security solutions throughout the DevOps lifecycle, fostering a culture of security-first thinking.
• Automate security testing within CI/CD pipelines to ensure compliance and rapid feedback.
• Identify vulnerabilities in existing environments and work collaboratively to remediate findings.
• Conduct security assessments and audits to evaluate the effectiveness of existing processes and tools.
• Participate in the design and usage of robust frameworks for managing application and infrastructure security.
• Provide guidance on secure coding practices, tools, and methodologies across development teams.
• Train and mentor junior engineers on security best practices and tools.
• Continuously monitor and analyze security alerts and events to improve incident response.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 5+ years of experience in DevSecOps, DevOps, or related roles, with proven expertise in integrating security within development processes.
• Strong knowledge of cloud services (AWS, Azure, Google Cloud), containerization, and orchestration technologies (Docker, Kubernetes).
• Experience with security tools such as SAST, DAST, IAM tools, and vulnerability scanners.
• Familiarity with scripting languages (Python, Bash, etc.) and configuration management tools (Ansible, Terraform).
• Excellent problem-solving skills and the ability to work collaboratively in a team-oriented environment.
• Relevant certifications (e.g., CISSP, CISM, CEH, or similar) are highly desirable.

Technologies & Tools

The Senior DevSecOps Engineer will utilize a variety of technologies and tools to enhance security in the CI/CD pipelines. This includes cloud platforms such as AWS or Azure, container management solutions like Docker and Kubernetes, along with security analysis tools such as SAST and DAST. Configuration management will also be vital, employing instruments like Ansible and Terraform for infrastructure as code (IaC) to ensure security compliance. Additionally, the role requires proficiency in monitoring tools and vulnerability assessment applications to maintain an effective security posture throughout the development workflow.

Ideal Candidates

Ideal candidates for the Senior DevSecOps Engineer position are those who possess a strong blend of technical proficiency and a proactive approach to security. They should demonstrate outstanding analytical skills, allowing them to identify potential vulnerabilities and devise effective solutions. A commitment to continuous improvement and a passion for integrating security within development processes are essential. Additionally, effective communication skills are important, as the role involves collaboration with various teams, thereby ensuring that security objectives align with overall business goals. Candidates should be adaptive, capable of navigating evolving technologies and adapting security practices to meet changing threats.