Sr Cybersecurity SecDevOps Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by BECU, so some details may not match this job. The employer's own page has the real description.

Job Overview

As a Senior Cybersecurity SecDevOps Engineer at BECU, you will play a pivotal role in enhancing the security posture of our development pipelines and production environments. Your expertise will ensure that security is integrated throughout the software development lifecycle, from requirement gathering to deployment. You will work collaboratively with cross-functional teams to design and implement secure solutions that protect our member data, mitigate risks, and comply with industry regulations.

Job Responsibilities

• Design, implement, and maintain security solutions for CI/CD pipelines to ensure security is baked into the development lifecycle.
• Collaborate with development teams to integrate security best practices and tools into their workflows.
• Conduct threat modeling and vulnerability assessments to identify and mitigate security risks within applications and infrastructure.
• Monitor security performance and incident management, responding to security incidents in a timely manner.
• Develop and maintain security policies, standards, and guidelines for the organization.
• Provide training and support to development teams on secure coding practices and security tools.
• Stay current with emerging threats, vulnerabilities, and security technologies to recommend updates and enhancements to existing systems.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 5 years of experience in cybersecurity and software development practices.
• Strong expertise in DevSecOps methodologies and tools, including but not limited to CI/CD pipelines.
• Experience with cloud security principles and services, preferably in AWS or Azure environments.
• Proficient in security automation tools and practices, such as Infrastructure as Code (IaC).
• In-depth knowledge of security frameworks such as NIST, ISO 27001, or CIS Standards.
• Relevant security certifications (e.g., CISSP, CISM, CEH) are preferred.

Technologies & Tools

In this role, you will utilize various technologies and tools including, but not limited to, security orchestration and automation platforms, vulnerability assessment tools, cloud service providers (AWS, Azure), and CI/CD tools such as Jenkins, GitLab CI, or CircleCI. Familiarity with programming/scripting languages such as Python, Bash, or PowerShell will also be advantageous in automating security tasks and enhancing security workflows.

Ideal Candidates

The ideal candidate for the Senior Cybersecurity SecDevOps Engineer position will exhibit a proactive and analytical mindset, with an unwavering commitment to cybersecurity excellence. Strong communication skills and the ability to collaborate effectively with diverse teams are essential traits. You should be adaptable, possess a lifelong learning attitude to keep pace with rapidly changing security landscapes, and demonstrate problem-solving abilities to identify and rectify security vulnerabilities effectively.