Address
Form of workJob Description
DevSecOps Engineer MAHIN-JOB-32807
Location: DALLAS
FULL TIME
We are seeking a talented and experienced DevSecOps Engineer to join our team. As a DevSecOps Engineer, you will play a key role in automating processes, improving system reliability, and optimizing our infrastructure. You will work closely with development, operations, and security teams to ensure the smooth delivery and operation of our software products.
Responsibilities:
Location: DALLAS
FULL TIME
We are seeking a talented and experienced DevSecOps Engineer to join our team. As a DevSecOps Engineer, you will play a key role in automating processes, improving system reliability, and optimizing our infrastructure. You will work closely with development, operations, and security teams to ensure the smooth delivery and operation of our software products.
Responsibilities:
- Design, implement, and maintain secure CI/CD pipelines for continuous integration, delivery, and deployment.
- Develop and implement monitoring, alerting, and logging solutions to proactively identify and address issues before they impact users.
- Collaborate with development, operations, and security teams to integrate security practices into the software development lifecycle.
- Automate security testing processes, including static code analysis, dynamic application security testing (DAST), and container security scanning.
- Implement and manage infrastructure as code (IaC) practices using tools like Terraform, CloudFormation, or Ansible.
- Monitor and respond to security incidents and vulnerabilities, ensuring timely resolution and appropriate mitigation measures.
- Conduct security assessments and audits of applications, systems, and cloud environments to identify and address potential risks.
- Build and maintain scalable, reliable, and resilient systems to ensure high availability and performance of production services.
- Automate routine operational tasks and workflows to improve efficiency and reduce manual intervention.
- Conduct post-mortems and root cause analysis of incidents to identify opportunities for improvement and prevent recurrence.
- Collaborate with development teams to optimize application performance, scalability, and reliability.
- Design and implement disaster recovery plans and procedures to minimize downtime and data loss.
- Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience).
- Proficiency in programming and scripting languages such as Python, Go, Java, or Shell scripting.
- Solid understanding of DevOps principles and practices, including agile methodologies, CI/CD pipelines, and version control systems (e.g., Git).
- Experience with cloud platforms such as AWS, Azure, or Google Cloud, including security controls and services.
- Proficiency in scripting and programming languages like Python, Bash, or PowerShell.
- Knowledge of security frameworks and standards such as OWASP, NIST, CIS Benchmarks, and GDPR.
- Familiarity with containerization technologies like Docker and Kubernetes, along with container security best practices.
- Strong knowledge of Linux/Unix systems administration and troubleshooting.
- Familiarity with containerization technologies like Docker and orchestration tools like Kubernetes.
- Expertise in implementing and managing monitoring and logging solutions (e.g., Prometheus, Grafana, ELK stack).
- Understanding of networking concepts, protocols, and security principles.
- Certifications such as Google Cloud Professional DevOps Engineer, AWS Certified DevOps Engineer, or Certified Kubernetes Administrator (CKA) are desirable.
- Certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or AWS Certified Security Specialty are a plus.
