Senior DevSecOps Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Second Front Systems, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Senior DevSecOps Engineer at Second Front Systems will play a pivotal role in enhancing the security posture of our software development and operational practices. You will be responsible for integrating security measures into the development process, automating security testing, and ensuring compliance with security standards. The ideal candidate will work closely with development, operations, and security teams to implement best practices for safeguarding our infrastructure and data throughout the software development life cycle.

Job Responsibilities

• Develop and implement security protocols and measures across all stages of software development.
• Automate security testing processes using CI/CD frameworks.
• Collaborate with cross-functional teams to identify and mitigate potential security vulnerabilities.
• Conduct regular security audits and assessments of applications and infrastructure.
• Provide guidance and training to development teams on secure coding practices.
• Monitor and analyze security incidents and incidents response procedures.
• Stay up-to-date with the latest security trends, threats, and technology advancements.
• Participate in incident response planning and might lead post-event evaluations to improve future security measures.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• A minimum of 5 years of experience in DevOps or Security Engineering roles.
• Strong understanding of cloud security principles and technologies (AWS, Azure, GCP).
• Proficient in scripting and programming languages such as Python, Go, or Bash.
• Experience with CI/CD tools (e.g., Jenkins, GitLab CI) and infrastructure as code (IaC) tools (e.g., Terraform, Ansible).
• In-depth knowledge of security tools and best practices, including vulnerability scanning and threat modeling.
• Relevant certifications (e.g., CEH, CISSP, AWS Certified Security) are a plus.

Technologies & Tools

The Senior DevSecOps Engineer will be working with a variety of cutting-edge technologies and tools, including but not limited to cloud services (AWS, Azure, GCP), CI/CD platforms (Jenkins, GitLab CI), configuration management tools (Ansible, Chef), and security frameworks (OWASP, NIST). Familiarity with container orchestration tools, such as Kubernetes and Docker, will also be necessary to effectively architect and secure applications within containerized environments.

Ideal Candidates

Ideal candidates for the Senior DevSecOps Engineer position will demonstrate a strong security mindset coupled with a collaborative spirit. They should possess excellent problem-solving skills, a keen attention to detail, and the ability to critically assess security risks in complex systems. Strong communication skills are essential as the role requires liaising with various teams across the organization. A genuine passion for security and a commitment to continuous learning will also set the right candidates apart from the rest.