Address
Form of workJob Description
We are looking for enthusiastic technologists who want to grow their career in DevSecOps – Cloud Security. In this position, you will work with cross-functional teams while leveraging a set of diverse technologies and an automation first approach to strive towards improving the efficiency and effectiveness of our DevSecOps program with a focus on Cloud Security. This role requires experience in public cloud and an exceptional level of enthusiasm for cloud-native technology with a proven track record of self-motivated accomplishment. This is an exciting opportunity to build upon technical experience in cloud security engineering.
In this role, the candidate can expect to:
- Review current and future state designs for Azure Network, Identity, and Configuration Management postures
- Provide input, analyze solutions, and implement changes to improve Azure Security overall with Lead Engineer input
- Engineer solutions with a focus on automation to reduce manual and repetitive tasks
- Manage technical support of DevSecOps capabilities and respond to service and escalation tickets within service-level agreements
- Design, implement, and maintain procedures, processes, and methodologies that support DevSecOps capabilities
- Actively monitor, assess and recommend tactical and strategic initiatives based on new and emerging threats posing risk to our company
- Stay apprised of current and proposed security changes impacting regulatory, privacy and security industry best practices
- Manage remediation efforts after security assessment findings outline weaknesses requiring attention
- Mentor other staff members to ensure consistency, quality and productivity of deliverables
The ideal candidate is:
- Passionate about security
- A team player that enjoys collaborating with cross-functional teams
- A great communicator (written and verbal) with an ability to articulate complex topics in a clear and concise manner
- Employs a flexible and constructive approach when solving problems
- Proficient with development and scripting languages, Python and javascript preferred
- Knowledgeable of traditional or cloud computing, including networking, compute, storage, app development, data, operations, or security
- Experienced with Infrastructure as code concepts and tooling including Terraform, Cloudformation, and YAML
- Continuously looking for opportunities to improve our processes and capabilities
- Experienced working with application and engineering teams
- A self-directed individual contributor
Preferred Skills and Experience
- Bachelor's or equivalent experience with an emphasis in computer science, computer engineering, software engineering, MIS related field
- 4+ years' experience in Azure
- 4+ years' experience in development, infrastructure, or cybersecurity
- Understanding of applicable risk management frameworks from NIST, Cloud Security Alliance, and OWASP
- Experience with CICD pipelines to automate application and infrastructure code deployments
- Experience with workload orchestration platforms such as Kubernetes
- Understanding of a wide-range of cybersecurity capabilities including application security, security engineering, identify & access management, incident response, logging & monitoring, and penetration testing
- Relevant certifications from GIAC, ISC(2) and other recognized cybersecurity industry organizations
At Codeworks, we're committed to diversity, equity, and inclusion in our workforce and beyond. We believe in equal opportunities and value the unique perspectives that every individual brings to our team. Join us in creating an inclusive, innovative, and collaborative workplace where your talents can thrive.
#LI-PG1
