Sr Cybersecurity SecDevOps Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by BECU, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Sr Cybersecurity SecDevOps Engineer at BECU plays a crucial role in enhancing our security posture by integrating security best practices into our DevOps processes. The selected candidate will be responsible for driving secure development practices, automating vulnerability management, and implementing security controls throughout the software development lifecycle. This position requires collaboration with multiple teams to ensure the seamless deployment of secure applications and infrastructure to protect our members' data and maintain compliance with industry standards.

Job Responsibilities

• Design and implement security solutions across all stages of software development lifecycle (SDLC).
• Automate security testing and vulnerability assessments within CI/CD pipelines.
• Collaborate with developers, operations, and other stakeholders to promote secure coding practices.
• Monitor and analyze security incidents to improve existing security measures.
• Develop security policies, procedures, and compliance documentation.
• Conduct training sessions and workshops to raise awareness of security practices within teams.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 5+ years of experience in cybersecurity, with a strong focus on SecDevOps methodologies.
• Extensive knowledge of security frameworks, including ISO 27001, NIST, and OWASP.
• Proficiency in programming and scripting languages such as Python, Bash, or Ruby.
• Experience with cloud platforms like AWS, Azure, or GCP.
• Solid understanding of containerization technologies (Docker, Kubernetes).
• Relevant certifications such as CISSP, CEH, or Security+ are highly desirable.

Technologies & Tools

In this position, the Sr Cybersecurity SecDevOps Engineer will utilize a variety of tools and technologies including but not limited to vulnerability scanners such as Nessus or Qualys, CI/CD tools like Jenkins or GitLab CI, container orchestration platforms such as Kubernetes, and configuration management tools such as Ansible or Terraform. Familiarity with security information and event management (SIEM) systems, as well as cloud-native security tools, will also be essential for effectively managing the engineering and operations of secure development environments.

Ideal Candidates

Ideal candidates for the Sr Cybersecurity SecDevOps Engineer role are those who possess a proactive mindset and a strong analytical capability to identify security gaps within applications and infrastructure. They should exhibit excellent communication skills, enabling them to effectively collaborate with cross-functional teams and convey complex security concepts in a clear and concise manner. A passion for continuous learning and keeping abreast of the latest security trends and threats is essential for adapting to the ever-evolving landscape of cybersecurity.