DevSec Ops Engineer
Job Description:
You will be responsible for creating DevOps pipelines and integrating security practices into our DevOps processes and ensuring secure and compliant deployment of applications and infrastructure across cloud platforms like AWS, Azure, and GCP.
RESPONSIBILITIES
1. Collaborate with development, operations, and security teams to integrate security practices into the CI/CD pipelines.
2. Implement and configure security controls and best practices in cloud environments, ensuring compliance with industry standards and regulations.
3. Automate security tasks and processes using tools like Terraform and Ansible.
4. Conduct security assessments and vulnerability scans of applications, infrastructure, and cloud resources, and remediate security risks.
5. Monitor and analyze security logs and events, implementing threat detection and incident response procedures.
6. Implement secure coding practices and perform mobile app linting and minting for mobile applications.
7. Continuously assess and improve security controls, processes, and technologies to address emerging threats and vulnerabilities.
8. Stay up-to-date with industry trends, emerging technologies, and best practices in DevSecOps, cloud security, and mobile app security.
9. Provide guidance and support to development and operations teams on secure deployment and configuration of cloud services and resources.
REQUIRED
2+ years of experience
Bachelors/Master’s Degree in Computer Science, IT or similar
MUST HAVE
1. Strong experience in DevSecOps or similar role, with expertise in cloud platforms such as AWS, Azure, or GCP.
2. In-depth understanding of security principles, best practices, and industry standards.
3. Knowledge of security frameworks and regulations (e.g., NIST, ISO 27001, GDPR) and their application in cloud environments.
4. Familiarity with security information and event management (SIEM) tools.
5. Proficiency in infrastructure-as-code tools like Terraform and configuration management tools like Ansible.
6. Experience integrating security practices into CI/CD pipelines.
7. Familiarity with mobile app linting and minting processes for ensuring mobile app security and quality.
8. Solid scripting and programming skills (e.g., Python, Bash, PowerShell).
9. Excellent problem-solving and troubleshooting abilities.
10. Strong written and verbal communication skills.
11. Multi Cloud Experience