Staff Security Engineer (DevOps)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by EDB, so some details may not match this job. The employer's own page has the real description.

Overview

The Staff Security Engineer (DevOps) at EDB will be responsible for enhancing the security posture of our development and operational environments. This role involves collaborating closely with software engineers and system administrators to integrate security practices into the DevOps lifecycle, thereby ensuring the highest security standards across all systems and applications. The ideal candidate will leverage their expertise in security technologies, risk assessment, and incident response to safeguard our critical assets while fostering a security-first culture within the organization.

Job Responsibilities

• Develop, implement, and manage security policies and procedures that align with industry standards.
• Conduct comprehensive security assessments of applications and infrastructure as part of the CI/CD pipeline.
• Collaborate with software development teams to incorporate security best practices right from the design phase.
• Automate security testing and deploy security tools within the DevOps framework.
• Monitor and respond to security incidents and vulnerabilities, performing root cause analysis as needed.
• Maintain documentation of security-related processes, configurations, and incidents.
• Guide and train teams regarding security awareness, compliance, and incident response strategies.
• Stay current with emerging security threats, coding practices, and compliance requirements.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• At least 5 years of professional experience in security engineering, with a focus on DevOps environments.
• Strong understanding of cloud security principles, containerization, and orchestration technologies.
• Proficiency in scripting and automation with languages such as Python, Bash, or similar.
• Experience with security tools such as SIEM, intrusion detection/prevention systems, and vulnerability scanners.
• Hands-on experience with security frameworks such as NIST, ISO 27001, or CIS.
• In-depth knowledge of network security protocols and secure coding practices.
• Relevant certifications (e.g., CISSP, CISM, CEH) are highly desirable.

Technologies & Tools

The Staff Security Engineer (DevOps) will work with a range of modern technologies and tools including but not limited to cloud platforms (AWS, Azure), containerization tools (Docker, Kubernetes), CI/CD pipelines (Jenkins, GitLab), security tools (Splunk, Nessus), and collaboration utilities (JIRA, Confluence). Familiarity with scripting languages such as Python and Bash is also essential for automating security tasks and procedures.

Ideal Candidates

The ideal candidate for this position will possess a proactive mindset with a strong analytical capability to identify vulnerabilities and threats before they manifest into issues. They should exhibit excellent communication skills, enabling them to effectively collaborate across different teams and levels of the organization. A commitment to lifelong learning, adaptability to changing security landscapes, and a passion for fostering a security-aware culture are key traits sought in candidates for this role.