Sr Security DevOps Engineer

08 Jul 2024

Vacancy expired!

TEKsystems is seeking a DevOps Security EngineerDescription:DevOps Security Engineer to help with identification and resolution of risks across our portfolio of continuous integration and delivery applications. Engineering IT is a fast-paced group that is working to modernize and evolve development workflows in cloud-native tools and processes. The ideal candidate is self-motivated to accelerate typically slow IT, replace manual processes with automation, and is excited to be a part of an innovative and continually learning development and operations team. We are looking for someone who has experience using industry standard security tools and processes to harden the Engineering IT service offerings.Responsibilities of This Role Secure internally developed and third-party applications used for DevOps in both self-hosted and SaaS environments Work with software vendors to gather and provide necessary data for them to harden third-party applications Enhance monitoring and log analysis systems to facilitate earlier detection of potential security issues Assist with development of automation via configuration management tools and scripts to insure secure and reliable applicationsRequired Skills and Experience 3+ years of performing and addressing vulnerability assessments for configuration and source code (Qualys, Rapid7, AppScan) 3+ years of recent Linux/Unix administration with emphasis on RedHat 3+ years of scripting experience (Python, Bash, etc) Knowledge of CIS and NIST approved hardening guides Experience with utilizing Configuration Management platforms, tools, and processes to automate infrastructure provisioning and change management (ex. Puppet, Ansible, git-ops) Production experience creating and using Docker images / containers Experience applying monitoring technologies such as Nagios or AppDynamics to gain operational intelligence about application systems at run-time General knowledge of reverse proxy systems such as Nginx, HAProxy, or Apache Experience generally with troubleshooting in a diverse technical environment Basic understanding of computer networking (OSI layers, DNS, etc) Well-versed with Git and various workflows (forking, gitflow, etc.) Familiar with Agile Scrum methodologiesDesired Skills and Experience Preference will be given to candidates with experience administering GitHub Enterprise, Jenkins, Artifactory, or Spinnaker Experience in applying security best practices to Linux environments Experience with AWS including EC2, RDS, ELB, and EKS technologies Experience scaling third-party software to handle traffic beyond the default configurationsSkills:vulnerability assessment, Nist, Qualys, python, ansibleAdditional Skills & Qualifications: Need someone to help with security compliance Writing python scripts and pull data Looking at access tokens and API calls and looking at the age Writing scripts on how bad is the environment and what they need to focus on. Come up with a plan to secure and improve the environment. Need to understand policies - what does this mean for our applications? Needs knowledge of Git and GitHub Jenkins and antifactory have some roles there Can you write Jenkins and know if there is a more secure way to do it Program we are doing is Bash. You need to query the application to know what's there. Need to tap into roles and what roles they have. It's a lot of data collection right now. They need to understand the application enough to identify the API calls. Target people who have done development before - expecting aspects of a software developer Should understand software supply chainAbout TEKsystems: We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company. The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.We are an equal opportunity employers and will consider all applications without regard to race, genetic information, sex, age, color, religion, national origin, veteran status, disability or any other characteristic protected by law. To view the EEO is the law poster click here. Applicants with disabilities that require an accommodation or assistance a position, please call 888-472-3411 or email mpowers@teksystems.com. This is a dedicated line designed exclusively to assist job seekers whose disability prevents them from being able to apply online. Messages left for other purposes will not receive a response.

Full-time