Cloud DevSecOps Engineer

2 days ago

Apply Now

Receive Emails with Similar Jobs

BusPatrol

WebsiteLinkedInAll Job Openings

BusPatrol is dedicated to making school transportation safer for children. As the leader in stop-arm enforcement programs, BusPatrol aims to change the driving culture around school buses, ensuring safer journeys for students. The company emphasizes safety technology and collaborates with various tech partners to enhance their safety programs and resources.

Technology • Safety • Education • Safety Tech • IoT

201 - 500 employees

Founded 2017

📚 Education

📋 Description

• Reporting to the Cloud Infrastructure Manager , the successful candidate will be instrumental in ensuring secure coding and infrastructure guidelines and best practices are in place. • This position will require a strong knowledge of DevOps principles and an ability to apply security technologies and best practices in an ever-changing and fluid environment. • Audit, maintain and establish best practices in a secure cloud infrastructure. • Develop, maintain, and socialize secure coding guidelines and best practices. • Work with developers to assist in designing and architecting secure systems. • Develop general techniques and frameworks that will enable other engineering teams to find flaws before they are introduced into production. • Be a security subject matter expert and respond to any internal security engineering questions/requests. • Work with other teams to help architect solutions that are inherently secure. • Correctly balance security risk and product advancement. • Perform threat modeling for existing applications. • Perform reactive incident response when a security event occurs. • Perform proactive research to detect new attack vectors. • Collaborate with infrastructure and application teams to advance their ability to take ownership of and implement secure coding techniques and follow the OWASP best practices. • Monitor the enterprise for signs of unexpected activity, and research, architect, and execute solutions that will advance internal security monitoring & controls. • Support design and maintenance of the cloud security environments, with a strong focus on AWS.

🎯 Requirements

• 4-5 years of systems administration, DevOps or development background using multiple tools, techniques, and platform technologies • AWS Serverless Computing experience (Lambda, Step Functions, ECS Fargate) • Application security experience, including dynamic & static code analysis, and a minimum of 2 years in cloud security in AWS (preferred) or GCP • Proficiency in at least one scripting or programming language (Python, Ruby or JavaScript preferred) • Experience with Continuous Integration/Continuous Deployment (CI/CD) processes and concepts using relevant technologies and tools (e.g. GitHub Actions, SAST, DAST, SCA) • Experience with Infrastructure-as-Code (IaC) tools and concepts at a production level (e.g. Terraform, CDK, CloudFormation) • Ability to work independently and collaboratively, and set your own goals • Excellent analytical skills: able to break down complex, multi-faceted problems into actionable steps without over-simplification • Ability to communicate security-related concepts to a broad range of technical and non-technical staff in an articulate manner • Understanding of frameworks such as OWASP Top 10 and OWASP Application Security Verification Standard • Nice to have: Experience with AWS SSO/Identity Center and external Identity Providers like Azure AD/Entra (preferred), Okta, Auth0 IoT and embedded security experience • Any relevant AWS or security certification • Familiarity with SOC 2 or other compliance frameworks

🏖️ Benefits

• A competitive salary and benefits package • Comprehensive personal time off, including volunteering and birthday days off • An opportunity to help build a company dedicated to children’s safety • The chance to join an innovative and dedicated team, focused on leading edge technology • The occasion to participate in BusPatrol’s culture of safety, learning, and teamwork