Principal Engineer-DevOps

Verizon•Irving, TX

2d•Hybrid

About The Position

The Principal Engineer-DevOps conducts research and evaluates application security scanning tools, platforms, and processes for cybersecurity initiatives. As a subject matter expert, the engineer guides development teams in improving security posture across API security, open-source software security, and build-environment security. The role combines development, cloud infrastructure, security, and operational knowledge with industry-standard automation tools. The engineer builds and maintains DevSecOps pipelines that implement shift-left security testing, including SAST, DAST, MAST, SCA, container scanning, API security, and build-environment security. The role develops and promotes DevSecOps and secure CI/CD best practices, investigates application-security issues, and develops enterprise-focused recommendations and solutions. It also contributes secure pipeline scripts to an inner-source model, automates scan reporting and dashboard integrations, tracks security metrics, and increases security visibility across the organization. The position deploys and manages security tools on cloud infrastructure platforms such as Google Cloud or Amazon Web Services using infrastructure-as-code principles. It stays current on security tools and techniques, drives innovation and process maturity, and works with teams to continually improve DevSecOps processes and tools. This is a hybrid role, with work from home and a minimum of three days per week in the office at a manager-defined location.

Requirements

Bachelor’s degree or foreign equivalent in Computer Science, Computer Engineering, Electrical or Electronics Engineering, or a related field.
Six years of progressive, post-baccalaureate experience in the offered job, or as a Computer Engineer, DevSecOps Engineer, Full Stack Developer, or in a related or similar position.
Six years of experience in Cloud Engineering.
Six years of experience in Continuous Integration / Continuous Delivery.
Six years of experience in Security.
Six years of experience in Scripting and Automation.
Six years of experience in Server Engineering.
Must reference: CBVASN-W.

Responsibilities

Research and evaluate application security scanning tools, platforms, and processes for cybersecurity initiatives.
Guide development teams as a subject matter expert in improving security posture, including API security, open-source software security, and build-environment security.
Build and maintain DevSecOps pipelines that incorporate shift-left security testing, including SAST, DAST, MAST, SCA, container scanning, API security, and build-environment security.
Develop and promote DevSecOps and secure CI/CD best practices.
Investigate application-security issues and develop enterprise-focused recommendations and solutions.
Contribute secure pipeline scripts to an inner-source model.
Develop automation for scan reporting and dashboard integrations.
Stay current on security tools and techniques and drive innovation and process maturity.
Collect security-related metrics and increase security visibility across the organization.
Deploy and manage security tools on cloud infrastructure platforms such as Google Cloud or Amazon Web Services using infrastructure-as-code principles.
Work with teams to continuously improve DevSecOps processes and tools.