DevSecOps Engineer

DevSecOps Engineer

Remote

Key Responsibilities

Secure Development Lifecycle

• Integrate security practices throughout the development lifecycle of prototypes and production systems
• Perform security assessments, code reviews, and penetration testing to identify and remediate vulnerabilities early
• Provide guidance on secure coding practices and collaborate with development teams to embed security from the start

Security Architecture & Controls

• Design and implement robust security controls for cloud environments
• Develop secure authentication and authorization mechanisms using standards like OAuth and OIDC
• Conduct threat modeling and proactively identify and mitigate potential security risks

Automation & Tooling

• Develop code to automate security configuration management and integrate security into CI/CD pipelines
• Build, test, and deploy cybersecurity-relevant technical solutions, including proof-of-concept implementations

Compliance

• Ensure alignment with compliance frameworks and internal security standards
• Document security architectures, control implementations, and supporting processes

Collaboration & Leadership

• Actively participate in agile ceremonies with geographically dispersed teams
• Collaborate across teams to remove barriers and improve security posture across the program
• Influence and mentor team members in secure development and DevSecOps practices.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or a related field
• 5+ years of experience in application security, cloud security, or related roles

Technical Expertise

• Strong knowledge of secure coding and threat modeling
• Experience securing cloud infrastructure (especially AWS) and implementing secure cloud architectures
• Proficiency in scripting or programming languages such as Python, Java, Go, or Bash
• Familiarity with CI/CD tools (e.g., GitHub Actions, GitLab Pipelines, AWS CodeDeploy)

Security Tools & Practices

• Experience with static/dynamic analysis tools, penetration testing, and security automation
• Familiarity with DevSecOps principles and secure software delivery pipelines

Soft Skills & Certifications

• Strong analytical, problem-solving, and communication skills
• Ability to explain security concepts to technical and non-technical audiences
• Security certifications preferred (e.g., CISSP, CSSLP, AWS Security)
• Interest in emerging threats, AI/ML security, and continuous learning.