Senior DevSecOps Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Second Front Systems, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Senior DevSecOps Engineer at Second Front Systems will be instrumental in integrating security practices within the DevOps process, ensuring the development lifecycle is not only efficient but also secure. This role encompasses various responsibilities including continuous integration/continuous deployment (CI/CD) pipeline management, vulnerability assessment, and remediation efforts, as well as collaboration with cross-functional teams to foster a strong security culture throughout the software development process. The Senior DevSecOps Engineer will leverage industry best practices to build robust security architectures and frameworks that support the organization's goals in delivering high-quality software solutions safely and efficiently.

Job Responsibilities

• Design, implement, and manage CI/CD pipelines with a focus on security.
• Conduct regular security assessments and vulnerability scans on applications and systems.
• Collaborate with development teams to integrate security into the application lifecycle.
• Develop and maintain security policies, best practices, and documentation.
• Respond to security incidents and provide remediation strategies.
• Monitor system security and provide insights for potential areas of improvement.
• Train team members on DevSecOps principles and practices.
• Stay up-to-date with industry trends and emerging security threats.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.
• Minimum of 5 years of experience in DevOps, SecOps, or related fields.
• Strong knowledge of security frameworks and compliance standards (e.g., NIST, ISO 27001).
• Experience with cloud platforms (e.g., AWS, Azure, Google Cloud) and related security tools.
• Proficiency in scripting languages (e.g., Python, Bash, PowerShell).
• Familiarity with containerization technologies (e.g., Docker, Kubernetes) and security practices.
• Solid understanding of network security, application security, and database security principles.
• Certifications in security (e.g., CISSP, CISM, AWS Certified Security) are highly preferred.

Technologies & Tools

The Senior DevSecOps Engineer will work with an array of technologies and tools that facilitate security and collaboration in software development processes. These may include, but are not limited to, cloud service platforms (AWS, Azure), scripting tools (Python, Bash), CI/CD tools (Jenkins, GitLab CI), configuration management tools (Ansible, Terraform), security scanning tools (Snyk, Nessus), and container orchestration platforms (Kubernetes). Familiarity with monitoring tools like Splunk, Prometheus, and application performance management tools will also be advantageous for this role.

Ideal Candidates

The ideal candidates for this position are proactive problem-solvers with a passion for security and innovation. They should possess strong analytical skills and demonstrate a keen attention to detail. Effective communication is essential, as the role involves working collaboratively with various stakeholders to educate and advocate for security practices. Having a growth mindset and a willingness to adapt to rapidly changing environments and technologies is crucial. Candidates should be self-motivated, with a proven ability to prioritize and manage multiple tasks while delivering high-quality results.