Sr Cybersecurity SecDevOps Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by BECU, so some details may not match this job. The employer's own page has the real description.

Overview

The Sr Cybersecurity SecDevOps Engineer at BECU plays a critical role in enhancing our cybersecurity posture while fostering a culture of security within the software development lifecycle. This position involves collaborating with engineering teams to develop, implement, and maintain security practices and solutions that protect our digital assets. The ideal candidate will utilize their expertise to proactively identify vulnerabilities, automate security testing, and integrate security processes into DevOps practices, thereby ensuring the highest levels of integrity, availability, and confidentiality for our information systems.

Job Responsibilities

• Assess and enhance security practices throughout the software development lifecycle.
• Design, implement, and manage tools and solutions for application security, network security, and threat detection.
• Automate security testing and integrate tools into CI/CD pipelines.
• Collaborate with software teams to identify and remediate vulnerabilities, providing guidance on secure coding practices.
• Conduct threat modeling, vulnerability assessments, and penetration testing.
• Develop and maintain security policies, standards, and procedures.
• Continuously monitor and analyze system behaviors to identify and respond to potential security incidents.
• Provide security training and awareness to development and operational teams.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 5 years of experience in cybersecurity, with a focus on SecDevOps practices.
• Strong knowledge of common security vulnerabilities (e.g., OWASP Top Ten) and secure coding techniques.
• Proficiency in scripting languages such as Python, Bash, or PowerShell.
• Experience with cloud environments (AWS, Azure, or Google Cloud) and their security implications.
• Familiarity with Compliance Standards (e.g., PCI-DSS, HIPAA, NIST).
• Certifications such as CISSP, CEH, or DevSecOps certification are highly desirable.

Technologies & Tools

The Sr Cybersecurity SecDevOps Engineer will utilize a variety of technologies and tools to ensure effective security measures across the development lifecycle. Key technologies include cloud security platforms (AWS Security Hub, Azure Security Center), penetration testing tools (Burp Suite, OWASP ZAP), and continuous integration and continuous deployment (CI/CD) tools such as Jenkins and GitLab CI. Familiarity with security information and event management (SIEM) solutions and application security testing tools is also essential for the role.

Ideal Candidates

Ideal candidates for the Sr Cybersecurity SecDevOps Engineer position possess a strong analytical mindset and a proactive approach to problem-solving. They exhibit a passion for cybersecurity and DevOps practices, showcasing effective communication skills to articulate complex security concepts to both technical and non-technical stakeholders. Adaptability to changing environments, a commitment to continuous learning, and the ability to work collaboratively in cross-functional teams are key characteristics that define success in this role at BECU.