SUMMARY: The DevSecOps (Development, Security, and Operations) Engineer is

responsible for integrating security practices into the SSDLC. They must

possess a deep understanding of development, security, and operations,

allowing them to design and implement robust security measures

throughout the software development lifecycle. The DevSecOps Engineer

works closely with development and operations teams to automate

security checks, identify vulnerabilities, and establish secure coding

practices. DevSecOps Engineers are also responsible for implementing

continuous integration and continuous deployment (CI/CD) pipelines with

integrated security testing, monitoring, and auditing tools. They will work

closely with both the system administrators and developers to maintain a

secure and reliable system.

ESSENTIAL JOB DUTIES AND RESPONSIBILITIES: Those duties necessary to meet the minimum requirements of the position.

To perform this job successfully, the individual must be able to perform each essential duty satisfactorily. Reasonable accommodation may be

made to enable individuals with disabilities to perform the essential functions. Other duties may be assigned.

Collaborate with developers and security professionals to implement DevSecOps practices throughout the software development lifecycle (SDLC)
Design, develop, and implement secure CI/CD pipelines using tools like Jenkins, GitHub/GitLab CI/CD, or AWS

Code Pipeline

Conduct security scans and vulnerability assessments for code, containers, and infrastructure
Develop and implement security best practices for application development, deployment, and operations
Monitor system health and performance, identify and troubleshoot issues proactively
Monitor security alerts and events and respond to incidents promptly
Perform root cause analysis of security incidents and implement preventive measures
Contribute to the development and maintenance of infrastructure automation scripts
Write clean and well-documented code for automation tasks (experience with PHP a plus)
Stay up to date on the latest DevSecOps tools, technologies, and security threats.
Ensure compliance with industry standards and regulations (e.g., NIST Csf, NIST 800-171, NIST 800-53)
Maintain and improve security policies, procedures, and documentation

BASIC QUALIFICATIONS: The basic qualifications listed below are representative of the relevant knowledge, skills, and/or experience required in order to be hired. These are requirements that we have determined are the minimum a candidate must have in order to be successful in this role.

Formal Education, Licenses, and Certifications Required:

Must possess one or more of the following:

Bachelor’s degree in computer science, Information Technology, or a related field of study
Associate’s degree in computer science, Information Technology, or a related field of study with a minimum of seven (7) years of experience in a DevSecOps role or a similar field with core PHP, PHP with Laravel, and Nginx experience
High school diploma or equivalent with a minimum of ten (10) of years of experience in a DevSecOps role or a similar field with core PHP, PHP with Laravel, and Nginx experience
Must be a US Person which is either a US citizen or a permanent resident of the US

Type and Length of Specific Experience Required:

Minimum of five (5) years of experience in a DevSecOps role or a similar field with core PHP, PHP with Laravel, and Nginx experience
Experience with CI/CD tools and methodologies

Knowledge and Skills Required:

Strong understanding of software development principles and best practices
Working knowledge of Linux systems administration
Strong understanding of security principles and best practices (OWASP Top 10, etc.)
Understanding of networking and system security principles.
Excellent problem-solving and analytical skills
Effective communication and collaboration skills
Ability to work with minimal management oversight

Cambridge Technology (CT) jobs

DevSecOps Engineer (Remote)