Development Security Operations (DevSecOps) Engineer

AEG Worldwide•Los Angeles, CA

2d•$80,509 - $128,000

About The Position

The Development Security Operations (DevSecOps) Engineer is a technical role responsible for implementing and maintaining secure software development practices across the organization. Working closely with development, operations, and security teams, this position helps ensure that software delivery processes and environments align with industry best practices while maintaining operational efficiency and strong security controls. The DevSecOps Engineer supports the integration of security throughout the software development lifecycle, assists in identifying and mitigating security risks, and contributes to the continuous improvement of security automation, monitoring, and compliance capabilities.

Requirements

BA/BS Degree (4- year)
2-5 years of related work experience
Experience managing vendor relationships and running an implementation from start to finish.
Has been a team lead or managed a team of security professionals.
Experience with a unified, real-time monitoring and analytics platform, such as Azure Log Analytics, Google Cloud Operations (Stackdriver), AWS CloudWatch, Sentry, Splunk or Datadog
Experience in at least one programming language (JavaScript, Ruby, Python, PHP, C#)
Experience with cloud environment such as AWS, Azure, and/or Google Cloud Platform
Experience using a CI/CD tool like Github Actions, CircleCI, Jenkins, Azure DevOps, or AWS CodePipeline
Experience with applying frameworks in the Software Development Lifecycle like OWASP top 10, NIST, etc
Experience configuring infrastructure and application alerts, alarms, and notifications.
Proven experience as a DevSecOps Engineer, Software Security engineer, Security Engineer, or in a similar role
Eagerness to work in a highly collaborative team environment
Knowledge of secure software development lifecycle (SSDLC) practices and secure coding principles
Strong analytical, decision-making, interpersonal, and conflict resolution skills
Great verbal and written communication skills
Results driven with reliable follow through
Comfortable using Git version control.
Familiarity with industry security standards and frameworks such as OWASP top 10, NIST, ISO 27001, or CIS benchmarks

Responsibilities

Implement and maintain secure software development practices across the organization.
Perform code reviews and collaborate with development teams to address security vulnerabilities and implement secure coding practices.
Provide guidance and support to development teams in implementing secure coding practices and integrating security into the development lifecycle.
Work to provide security efforts with DevOps team to secure infrastructure and ensure secure deployment and operation of applications.
Work with cross-functional teams to define security requirements, standards, and guidelines for software development projects.
Enhance and monitor the tools used within the development and operations process.
Review and enhance CI/CD pipelines using Github Actions, Azure DevOps, AWS Code pipeline, and Jenkins.
Utilize tools like Orca Security, Sysdig, Codacy and Azure Log Analytics to monitor and analyze system logs and application code for security vulnerabilities.
Stay up to date with the latest security trends, vulnerabilities, and industry best practices, and ensure their integration into our software development processes.
Protect container images, build artifacts, and other software packages used in the CI/CD pipeline.
Scan artifacts for vulnerabilities before deploying them and utilize secure registries for storage and distribution.
Work on the implementation as well as help maintain a security program.
Conduct Risk Assessments using frameworks like the OWASP top 10.
Develop a Risk Treatment Plan.
Determine and create needed Information Security Policies.
Determine and create needed Information Security Objectives.
Maintain and help develop Security Reports.
Help implement Security Controls within each dev group.
Manage vendor relations.
Work with internal and external teams in working on audits, incident response, and/or compliance processes.
Define requirements and processes for Disaster Recovery (DR) and Business Continuity.
Assist in the facilitation of a DR test.