DevSecOps Engineer
We are seeking a skilled and motivated Mid-Level DevSecOps Engineer to join our team. The ideal candidate will have a strong background in both development and security operations, with a focus on integrating security practices into the DevOps process. This role involves working closely with development, operations, and security teams to ensure the seamless delivery of secure software solutions.
Key Responsibilities:
* Security Integration: Implement and manage security practices within the DevOps pipeline to ensure code and infrastructure security throughout the development lifecycle.
* Automation: Develop and maintain automation scripts and tools for security testing, compliance, and deployment processes.
* Monitoring and Incident Response: Set up and monitor security alerts and logs, respond to security incidents, and conduct root cause analysis.
* Collaboration: Work collaboratively with development, operations, and security teams to design, implement, and maintain secure CI/CD pipelines.
* Vulnerability Management: Identify, assess, and remediate vulnerabilities in applications, containers, and infrastructure.
* Compliance: Ensure compliance with industry standards and regulations (e.g. GDPR, HIPAA, PCI-DSS) through automated compliance checks and audits.
* Continuous Improvement: Stay updated on the latest security threats, trends, and technologies, and continuously improve security practices and tools.
* Documentation: Create and maintain comprehensive documentation for security policies, procedures, and best practices.
Qualifications:
* Education: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent experience).
* Experience: 3-5 years of experience in a DevSecOps, DevOps, or Security Engineer role.
* Technical Skills: Proficiency with DevOps tools (e.g. Jenkins, GitLab CI, CircleCI). Experience with configuration management tools (e.g. Ansible, Puppet, Chef). Strong scripting skills (e.g. Python, Bash, PowerShell). Knowledge of containerization and orchestration (e.g. Docker, Kubernetes). Familiarity with cloud platforms (e.g. AWS, Azure, Google Cloud). Experience with security tools (e.g. Snyk, Aqua, Twistlock, Nessus). Understanding of network security, firewalls, VPN, and IDS/IPS.