Senior DevSecOps Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Second Front Systems, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Senior DevSecOps Engineer at Second Front Systems will play a pivotal role in integrating security practices within the DevOps process. This individual will be responsible for developing, managing, and improving security automation tools and processes, ensuring that applications and infrastructure are secure from the ground up. The ideal candidate will collaborate with cross-functional teams, implement security best practices, and provide guidance on risk management throughout the software development lifecycle.

Job Responsibilities

• Implement and manage security automation tools and frameworks to enhance DevOps processes.
• Collaborate with development, operations, and security teams to identify and mitigate security risks.
• Perform risk assessments and vulnerability analyses to proactively manage security threats.
• Design and enforce security policies, standards, and guidelines across applications and infrastructure.
• Conduct security testing, including penetration testing and code reviews, to ensure secure software development.
• Stay updated with the latest security trends, vulnerabilities, and compliance requirements.
• Provide training and support to development teams on security best practices and tools.
• Participate in incident response and remediation efforts as needed.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• 5+ years of experience in DevOps, SecOps, or related fields with a focus on application security.
• Proficient in security tools such as SAST, DAST, and vulnerability management solutions.
• Strong experience with CI/CD pipelines, infrastructure as code (IaC), and cloud services (AWS, Azure, or GCP).
• Deep understanding of secure coding practices and software development methodologies.
• Knowledge of compliance frameworks such as NIST, ISO 27001, or equivalent regulations.
• Experience with scripting languages (Python, Bash, etc.) for automation tasks.
• Certifications such as CISSP, CISM, or AWS Certified Security – Specialty are a plus.

Technologies & Tools

The Senior DevSecOps Engineer will work with a range of technologies and tools including AWS, Azure, Kubernetes, Docker, Jenkins, Terraform, Puppet, and Ansible, as well as security-specific tools such as Snyk, Aqua Security, and OWASP ZAP. Additionally, familiarity with version control systems, particularly Git, and continuous integration/continuous deployment (CI/CD) practices is essential.

Ideal Candidates

Ideal candidates for this position will exhibit a strong passion for security and a deep understanding of both development and operational processes. They will possess excellent problem-solving skills and the ability to work collaboratively in dynamic team environments. Strong communication skills are essential, as the candidate will frequently liaise with various stakeholders, providing guidance and sharing knowledge across multiple domains. Additionally, a proactive mindset, with the ability to adapt to changing technologies and security threats, is highly desirable.