DevSecOps Engineer

Berkadia•Midvale, UT

27d

About The Position

DevSecOps Engineers play a crucial role in the Information Security team by researching, developing, and supporting the deployment of security solutions to uphold secure coding standards. They are responsible for monitoring and resolving coding and open-source vulnerabilities, ensuring robust protection throughout the software development lifecycle.

Requirements

Strong software development knowledge in programming languages such as NodeJS, Python, TypeScript, etc.
Experience in developing and securing software solutions, with a strong understanding of DevOps/DevSecOps principles.
Proficiency in building secure and efficient CI/CD pipelines, with a full end-to-end security assessment capability.
Expertise in both Static and Dynamic Application Security Testing methodologies and tools, along with best practices for enterprise-scale continuous delivery.
Comprehensive understanding of security concepts, threat modeling, risk assessment techniques, and cloud-native technologies, including platforms like Azure, AWS, and Kubernetes.

Responsibilities

Conduct complex, high-skill work with minimal supervision, exercising independent judgment.
Assist teams with security inquiries related to the DevSecOps lifecycle.
Maintain and optimize the security of CI/CD pipelines, automating secure code scanning processes.
Secure enterprise applications on cloud platforms, focusing on automation, security, and reliability.
Maintain and enhance automation for security tasks in application development, design, and debugging.
Assist teams in addressing known vulnerabilities and mitigating associated risks.
Collaborate with innovation managers on security aspects of CI/CD troubleshooting, automation, and configuration management.
Identify and verify risks, assigning ownership and assisting in remediation efforts.
Communicate effectively with both technology and business stakeholders.
Collaborate and coordinate with peers and team members, actively participating in career development.
Take accountability for work assignments and responsibilities.
Set and adhere to clear timelines for project completion.
Work collaboratively within a cross-functional, matrixed team environment.
Demonstrate curiosity and eagerness to learn, exploring new technologies and ideas to enhance company performance.
Other duties as assigned.