Vacancy expired!
Senior DevSecOps Engineer This company is seeking a talented DevSecOps Engineer to join our team. The ideal candidate will be responsible for integrating security into every aspect of our software development and deployment process along with developing and maintaining the tools and processes necessary for the continuous integration, delivery, and deployment of software. This individual will collaborate with developers and system administrators to ensure that security is implemented and maintained throughout the development lifecycle. The DevSecOps Engineer will also provide support and guidance on security issues, including vulnerability management, incident response, and compliance. This company is located in Vienna, VA. Will remain remote, but the candidate must be local to the area.
What You Will Be Doing: • Develop and maintain the tools and processes necessary for continuous integration, delivery, and deployment • Implement and maintain infrastructure as code using tools such as Terraform • Build and maintain secure infrastructure, including automation tools and security testing frameworks • Actively document, maintain and audit security controls for IAL2, SOC2, ISO27001 and any other certifications • Monitor and maintain application and infrastructure logs and metrics to ensure reliability and availability • Develop and implement disaster recovery and business continuity plans • Participate in on-call rotations to provide support for production systems • Stay up to date with emerging DevOps technologies and trends and make recommendations for improvements to current systems and processes • Collaborate with development teams to ensure security is integrated into the software development lifecycle • Develop and implement security policies and procedures to ensure compliance with industry standards and regulations • Conduct regular security assessments and vulnerability scans • Investigate and respond to security incidents • Provide guidance and support on security issues to stakeholders across the organization • Monitor and maintain security logs and audit • Ensure data security and integrity by implementing appropriate access controls and backup and recovery procedures • Monitor database performance and identify and resolve issues related to database capacity, scalability, and performance • Stay up-to-date with emerging security trends and technologies Required Skills & Experience: • Bachelor's degree in Computer Science, Information Technology, or a related field • 5+ years of experience in a DevOps or security-focused role • Experience with continuous integration and continuous delivery (CI/CD) tools, such as Jenkins, GitLab, or AWS CodePipeline • Strong understanding of infrastructure as code (IAC) principles and tools, such as Terraform, CloudFormation, or Ansible • Experience with cloud infrastructure platforms, such as AWS, Azure, or Google Cloud Platform • Strong scripting skills in languages such as Bash, Python, or Ruby • Knowledge of containerization technologies, such as Docker and Kubernetes • Familiarity with monitoring and logging tools, such as DataDog, Prometheus, Grafana, • Knowledge of security best practices and standards, including OWASP Top 10, NIST, and CIS • Experience with cloud infrastructure and containerization technologies (AWS, Docker, Kubernetes, etc.) • Strong understanding of software development practices and methodologies, including Agile and DevOps • Excellent communication and collaboration skills Desired Skills & Experience: • Knowledge of SQL Scripting, database performance and monitoring • Familiarity with security testing tools, such as Burp Suite, ZAP, and OWASP Dependency Check • Certifications such as CISSP, CISA, or CISM are a plus Applicants must be currently authorized to work in the United States on a full-time basis now and in the future. This position doesn't provide sponsorship.