Senior DevSecOps Engineer - Remote!

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Artech L.L.C., so some details may not match this job. The employer's own page has the real description.

Overview

The Senior DevSecOps Engineer at Artech L.L.C. will play a critical role in integrating security practices within the DevOps framework. This position involves collaborating with development teams and security professionals to ensure the secure design and deployment of applications and infrastructure. The successful candidate will be responsible for automating security processes, implementing CI/CD pipelines, and continuously improving security protocols to protect our systems and data. This position offers the flexibility of working remotely while contributing to a dynamic team focused on innovative solutions.

Job Responsibilities

• Design, implement, and manage DevSecOps frameworks, integrating security practices from the development phase through deployment.
• Automate security testing and monitoring processes within the CI/CD pipeline to identify vulnerabilities early.
• Collaborate with cross-functional teams to enforce security best practices and guidelines across the software development lifecycle.
• Conduct security assessments, threat modeling, and risk analysis on applications and infrastructure.
• Manage and maintain security tools and technologies, ensuring they meet the evolving needs of the organization.
• Provide guidance and support to developers regarding secure coding practices and vulnerability remediation.
• Stay updated on the latest security trends, technologies, and regulatory requirements to keep the organization compliant.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Proven experience (5+ years) in DevOps and related security roles, specifically in environments using CI/CD practices.
• Strong understanding of security principles, techniques, and practices, with experience in at least one security framework such as OWASP, NIST, or ISO 27001.
• Proficiency in scripting and automation using tools such as Python, Bash, or PowerShell.
• Hands-on experience with containerization technologies (Docker, Kubernetes) and cloud platforms (AWS, Azure, GCP).
• Familiarity with security tools such as SAST, DAST, SIEM, and WAF.
• Excellent communication skills, with the ability to articulate technical concepts to non-technical stakeholders.

Technologies & Tools

The Senior DevSecOps Engineer will work with a variety of technologies and tools, including but not limited to: Jenkins, GitLab CI, Terraform, Ansible, Docker, Kubernetes, AWS, Azure, and various security scanning tools such as SonarQube, Burp Suite, and Fortify. The candidate will also utilize monitoring and logging tools to enhance security and operational capabilities.

Ideal Candidates

Ideal candidates for this position are proactive problem solvers who are passionate about security and automation within the software development lifecycle. They possess strong analytical skills and a depth of technical knowledge combined with excellent communication skills to effectively collaborate with various teams. A successful candidate will be detail-oriented, able to thrive in a remote work environment, and demonstrate a commitment to continuous learning and improvement in the rapidly evolving field of DevSecOps.