Senior Security DevOps Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Webflow, so some details may not match this job. The employer's own page has the real description.

Job Overview

As a Senior Security DevOps Engineer at Webflow, you will play a critical role in ensuring the security and integrity of our software delivery processes. You will collaborate with cross-functional teams to implement security controls, automate security processes, and proactively identify vulnerabilities within our systems. Leveraging your expertise in DevOps practices and security frameworks, you will contribute to the development of secure applications and infrastructure that meet the highest industry standards.

Job Responsibilities

• Design and implement security measures across the CI/CD pipeline to minimize vulnerabilities.
• Conduct regular security assessments, including vulnerability scans and penetration tests.
• Collaborate with software engineers to integrate security best practices into application development.
• Develop and maintain security policies, procedures, and standards in accordance with compliance requirements.
• Monitor security alerts and respond efficiently to incidents, ensuring minimal disruption to operations.
• Educate and train development and operational teams on security-related topics and threat awareness.
• Continuously evaluate and improve security tools and practices to enhance overall security posture.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 5+ years of experience in a Security Engineering or DevOps role, with a focus on security.
• Strong understanding of security frameworks such as OWASP, NIST, or CIS.
• Proficient in scripting languages such as Python, Bash, or similar.
• Experience with cloud security management in environments such as AWS, Azure, or Google Cloud Platform.
• Familiarity with tools like Terraform, Ansible, and Kubernetes is preferred.
• Exceptional problem-solving skills and the ability to work under pressure.

Technologies & Tools

The Senior Security DevOps Engineer will work with a variety of technologies and tools, including cloud platforms like AWS and Azure, CI/CD tools such as Jenkins or GitLab CI, configuration management tools like Ansible and Terraform, and security assessment tools for vulnerability scanning and management. Experience with containerization technologies such as Docker and orchestration platforms like Kubernetes will also be essential in this role.

Ideal Candidates

Ideal candidates will exhibit a strong technical background coupled with a proactive mindset towards security. They should possess excellent communication skills, enabling them to convey complex security concepts to non-technical stakeholders. A passion for continuous learning and staying updated on the latest security trends and technologies is crucial. Additionally, the ideal candidate should demonstrate a commitment to quality and collaboration, thriving in a dynamic team environment to achieve collective goals efficiently.