DevSecOps Engineer

May 4

Apply Now

Get a free AI resume review

Material Bank

WebsiteLinkedInAll Job Openings

Search and sample materials from hundreds of leading brands. Order by midnight, receive by 10:30am.

Architecture • Interior Design • Logistics • Market Research • Contract Design

201 - 500

Description

• Assist in the development and implementation of CI/CD security strategy and practices in tandem with other technical team leads. • Build relationships with developers, stakeholders and scrum masters to incorporate security principles into engineering design and deployments. • Build services and tools to enable developers and engineers to easily use security components produced by application security team members. • Enrich DevOps architecture with security standards, best practices and automations. • Serve as a point of contact for security-based escalations and remain tightly involved through resolution. • In-depth understanding of TCP/IP, computer networking, routing and switching • Solid experience with firewall and intrusion detection/prevention protocols • Influence secure API development standards and implementations across multiple platforms. • Define security testing strategy and implement technologies and processes to support the strategy. • Coordinate ethical hacking & penetration testing exercises • Supervise testing and validation in application security controls across projects. • Simplify automation that applies security inter-workings with CI/CD pipelines. • Support the ability to “shift left” and incorporate security early on and throughout the development lifecycle. • Identify vulnerabilities in code through automated and manual assessments, and promote quick remediation. • Partner with teams to define key performance indicators (KPIs) and metrics across business units.

Requirements

• At least 8 years’ experience in information technology, information security administration or security operations. • Understanding of OWASP, CVSS, the MITRE ATT&CK framework and the software development lifecycle (SLDC). • Experience with agile workflows, including Scrum and Kanban. • Experience with DevSecOps implementations (SAST, SCA and/or DAST) • Experience with Amazon Web Services (AWS) security and operations • Strong knowledge on containerization and orchestration tools like Docker and Kubernetes • Certifications – CISSP, AWS Certified Cloud Practitioner

Benefits

• Generous PTO, Sick Days, Paid National Holidays, and even more (ask us about this when we connect). • We contribute to your medical, dental, vision and short-term/long-term disability plans and have a strong employee assistance program. • 401(k) eligible after your first 90 day's employed! • We sponsor multiple events throughout the year to help out our communities. You will receive time off to give back as well. • We'll help you take your career to the next level. We want you to be creative and take initiative which will allow you to grow and create within the company. Most importantly, be the best at what matters! • With business units and employees across the globe, Material Technologies has embraced a hybrid working model allowing department leaders to decide on the best approach for their respective teams, whether that be remote, in person, or a little of both.