Sr. Security Engineer, DevSecOps

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Informed.IQ, so some details may not match this job. The employer's own page has the real description.

Overview

The Senior Security Engineer, DevSecOps at Informed.IQ will be responsible for integrating security practices into the DevOps process. This role will involve designing, implementing, and managing security measures and compliance throughout the software development lifecycle. The ideal candidate will collaborate closely with development and operations teams, ensuring that security is considered at every stage of development and deployment. Their expertise will be essential in identifying vulnerabilities, responding to incidents, and fostering a culture of security awareness across the organization.

Job Responsibilities

• Design, implement, and manage security solutions within the DevOps pipeline.
• Conduct regular security assessments and vulnerability scans to identify potential risks.
• Develop and enforce security policies, procedures, and best practices across the organization.
• Collaborate with development and IT operations teams to integrate security into the software development lifecycle.
• Respond to security incidents and breaches, conducting thorough investigations and remediation efforts.
• Provide guidance and training to developers on secure coding practices.
• Monitor security alerts, analyze logs, and take appropriate action to mitigate risks.
• Stay updated on the latest security vulnerabilities, trends, and regulatory requirements affecting the organization.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 5 years of experience in cybersecurity, with a focus on DevSecOps practices.
• Proficiency in security frameworks and standards (e.g., NIST, OWASP, ISO 27001).
• Experience with cloud security and deployment models (AWS, Azure, Google Cloud Platform).
• Hands-on experience with security tools (e.g., static/dynamic application security testing, intrusion detection).
• Strong understanding of network security, firewalls, and encryption technologies.
• Relevant security certifications (e.g., CISSP, CISM, CEH, or similar) are highly desirable.

Technologies & Tools

The Senior Security Engineer will utilize various technologies and tools essential for maintaining security within the DevSecOps framework. These include application security testing tools, intrusion detection systems, threat modeling software, cloud security solutions, and continuous integration/continuous deployment (CI/CD) tools. Familiarity with scripting languages and automation tools will also be instrumental in streamlining security processes.

Ideal Candidates

The ideal candidate for the Senior Security Engineer, DevSecOps position is someone who is not only technically proficient but also embodies a proactive and innovative mindset. They should possess exceptional problem-solving skills and the ability to communicate complex security concepts to diverse stakeholders effectively. A deep commitment to continuous learning and improvement, coupled with a passion for fostering a secure and resilient organizational culture, will be key traits that differentiate a successful candidate in this role.