Principal Engineer-DevOps
About The Position
The Principal Engineer-DevOps conducts research and evaluates application security scanning tools, platforms, and processes for cybersecurity initiatives. As a subject matter expert, the role guides development teams in improving security posture across API security, open-source software security, and build environment security. The position combines development, cloud infrastructure, security, and operational knowledge of cloud infrastructure and industry-standard automation tools. The role builds and maintains DevSecOps pipelines to adopt a shift-left approach to security testing, including SAST, DAST, MAST, SCA, container scanning, API security, and build environment security. It develops and promotes DevSecOps and secure CI/CD best practices, investigates application security issues, and creates enterprise-focused recommendations and solutions. The position also contributes secure pipeline scripts to an inner-source model, automates scan reporting and dashboard integrations, tracks security metrics, and promotes security visibility and process maturity. The engineer deploys and manages security tools on cloud infrastructure platforms such as Google Cloud or Amazon Web Services using infrastructure-as-code principles, and works with teams to continuously improve DevSecOps processes and tools. This is a hybrid role with a defined work location that includes working from home and at least three days per week in the office, as set by the manager. The scheduled workweek is 40 hours.
Requirements
- Bachelor’s degree or foreign equivalent in Computer Science, Computer Engineering, Electrical or Electronics Engineering, or a related field.
- Six years of progressive, post-baccalaureate experience in the job offered, or as a Computer Engineer, DevSecOps Engineer, Full Stack Developer, or in a related or similar position.
- Six years of experience in Cloud Engineering, Continuous Integration/Continuous Delivery, Security, Scripting and Automation, and Server Engineering.
Responsibilities
- Research and evaluate application security scanning tools, platforms, and processes for cybersecurity initiatives.
- Guide development teams as a subject matter expert to improve security posture in API security, open-source software security, and build environment security.
- Build and maintain DevSecOps pipelines that support shift-left security testing, including SAST, DAST, MAST, SCA, container scanning, API security, and build environment security.
- Develop and promote DevSecOps and secure CI/CD best practices.
- Investigate application security issues and develop enterprise-focused recommendations and solutions.
- Contribute secure pipeline scripts to an inner-source model.
- Develop automation for scan reporting and dashboard integrations.
- Stay current on security tools and techniques and drive innovation and process maturity.
- Collect security-related metrics and increase security visibility across the organization.
- Deploy and manage security tools on cloud infrastructure platforms such as Google Cloud or Amazon Web Services using infrastructure-as-code principles.
- Work with teams to continuously improve DevSecOps processes and tools.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Principal
