At Deckers Brands, Together, Every Step is a promise kept that every employee can bring their authentic self, is valued and supported, as a whole person, at work and beyond. Together, Every Step is how we continue to deliver exceptional business results, experience an amazing place to work, and have a positive impact on the communities and world around us.

Job Title: DevSecOps Engineer - Cybersecurity

Reports to: Senior Manager Security Engineering

Location: Remote

Interested applicants must reside in one of the following approved states: Arizona, California, Colorado, Indiana, Massachusetts, Minnesota, New York, Oregon, Pennsylvania, Texas, Utah, Washington

The Role

Security as Code. Deckers Brands is looking for a talented engineer to join our Information Security Team. This role is for a unique personality that thrives on deploying and maintaining cyber security technologies, as they relate to code development. This individual will also assist in threat hunting, incident response, and your more “typical” security functions. Information Security Team members work closely with application development, operations groups, and business stakeholders across Deckers Brands to ensure that solutions are implemented and maintained in a manner that preserves the confidentiality, integrity and availability of our data.

Security by design. This individual will be a critical resource for enabling the juncture of security and development to find mutual success. You will be the guiding voice that keeps our code aligned with security best practices and compliant with various global government and industry regulations.

We celebrate diversity--of your background, your experiences and your unique identity. We are committed to ensuring an inclusive and equitable workplace where all of our employees can Come as They Are. We believe that when we bring our different perspectives to work, we are truly Better Together.

Your Impact

The primary functions of this role, include but are not limited to:

Perform penetration tests on internal and external code to ensure Deckers’ desired security posture is maintained
Assist with the development, deployment, and maintenance of static and dynamic code analysis tools
Perform security impact assessment on code releases to ensure the appropriate security controls are in place for the level of risk the code represents
Work with global teams to audit and monitor software development lifecycle standards to confirm they are properly defined and maintained
Work with development teams to tune Web Application Firewalls and DDOS solutions
Provide “follow the sun” support for escalated Information Security-related requests and incidents, as well as participate in on-call support rotations, as needed
Work with security operations analysts to perform deeper analysis of detected events
Review 3rd party connections and communications to confirm they follow Deckers Brands security and compliance requirements
Drive development of an Application Security Testing Orchestration (ASTO) environment
Occasional travel to remote or regional offices may be required

Who You Are

You are a proactive and detail-oriented professional with a passion for cybersecurity and software development. You thrive in collaborative environments and possess excellent problem-solving abilities. Your strong communication skills enable you to effectively convey complex security concepts to both technical and non-technical stakeholders. You are adaptable, able to handle multiple priorities, and committed to continuous learning and improvement.

Collaborative: You work well with cross-functional teams and are capable of fostering positive working relationships with colleagues and stakeholders.

Problem-Solver: You have a knack for identifying potential security issues and developing innovative solutions to mitigate risks.

Strong Communicator: You can articulate complex technical concepts clearly and concisely to diverse audiences, ensuring everyone is on the same page regarding security measures and practices.

We’d love to hear from people with

BA/BS degree, or equivalent experience
Security professional certification, such as Global Information Assurance Certifications, Certified Information Systems Security Professional (CISSP), Systems Security Certified Practitioner (SSCP), AWS Certified Security – Specialty, Palo Alto Networks Certified Network Security Administrator (PCNSA), or other similar credentials, is desired
3 years’ experience in an either a development or DevOps role, or some combination of the two
Experience working with eCommerce SaaS solutions with a preference for a background that includes Salesforce Commerce Cloud
Knowledge and work experience in security cloud architecture with a focus on securing AWS environments. Particular value will be given to a candidate that has experience with AWS CloudTrail, CloudWatch, Landing Zone, IAM, and GuardDuty
Understanding of Cloud Formation Templates and AWS CLI scripting to maintain infrastructure as code
Understanding of Web Application Security for both web sites and web services, along with common vulnerabilities and attacks
Deep and broad understanding related to database security and familiarity with database security scanning tools and techniques
Experience with security practices such as security incident response and risk management
Experience in the design, development, implementation and operational support of mission critical solutions in large scale environments and organizations
Experience with the Atlassian suite of products: Confluence, Jira, and Bitbucket
Familiarity with any of the following languages: Python, Ruby, Java, C++, etc. Experience writing shellcode is a bonus
Ability to read exploit code to determine how it works, why it works and any modifications that may be necessary before using it in a test
Fluent written and spoken business English
A “breaker” mindset. You ask, “How are things NOT supposed to work?”
Excellent verbal and written communication skills with a wide range of audiences including technologists, executives, business stakeholders and IT team members
Great attitude and strong work ethic
High level of creativity, quick problem-solving capabilities and strong analytical skills
Excellent written and verbal communication skills
High level of personal integrity, and the ability to professionally handle confidential matters and show an appropriate level of judgment and maturity
Must be a critical thinker with strong problem-solving skills
Ability to work on multiple projects and meet deadlines by setting priorities with work projects
Ability to establish and maintain effective working relationships with coworkers and clients
High degree of initiative, dependability and ability to work with little supervision.

What We'll Give You

Competitive Pay and Bonuses - We’ve created a variety of competitive compensation programs to foster career development, reward success and to show our employees just how much they’re valued.
Financial Planning and wellbeing - No matter what financial goals our employees have set, we want to help them get there. Our plans provide powerful ways to protect income, pay for expenses and invest in the future.
Time away from work - Sometimes we need time away to be with family, focus on our health or just simply recharge. Our plans support our employees’ needs to get out, get healthy and come back stronger than ever.
Extras, discounts and perks - Being a valued member of the Deckers Brands team means more than just a paycheck. From generous discounts to community-based programs, we offer a variety of cool extras
Growth and Development - Deckers Brands was built on the idea of pursuing passion. That’s why we offer extensive opportunities and support for personal and professional development.
Health and Wellness - There’s nothing basic about our comprehensive health and wellness programs and offerings. While at work and at play, we aim to support a healthy lifestyle.

$130,000 - $140,000

The salary range posted reflects the minimum and maximum target for new hire salaries for this role in our Goleta, CA location. Individual pay will be determined by location and additional factors, including job related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary for your preferred location during the hiring process.

Equal Employment Opportunity

Diversity and inclusion are key to our success. We are proud to be an equal opportunity employer and our employees are people with different strengths, experiences and backgrounds who share a passion for our brands. We welcome qualified applicants regardless of their race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, age, military or veteran status, mental or physical disability, medical condition and all of the other beautiful parts of your identity.

Deckers Brands jobs

DevSecOps Engineer - Cybersecurity