Senior DevSecOps Engineer, Starburst

• Bachelor's degree in Engineering, Computer Science, Management Information Systems, or a related study, or equivalent experience
• Minimum of 5+ years of professional experience in DevOps, security engineering, or a related field
• Strong understanding of security principles and best practices, including threat modeling, risk assessment, and vulnerability management
• Proficiency with DevOps tools and practices, including CI/CD pipelines, containerization (Docker, Kubernetes), and version control systems (Git)
• Solid understanding of cloud security concepts and experience with cloud platforms (AWS, Azure, Google Cloud)
• Strong scripting and automation skills using languages such as Python, Bash, or PowerShell
• Experience with security tools such as OWASP ZAP, Burp Suite, Nessus, Metasploit, or similar
• Experience in development with shell scripting such as Python, GoLang, etc.
• Expertise in the Linux operating system
• Must be able to demonstrate innovation in problem-solving
• Clear communication with team members and product owners
• Ability to effectively communicate technical findings to both technical and non-technical stakeholders
• Must follow and support agile methodologies and practices by actively participating in all SCRUM ceremonies
• Must adhere to and develop best practices in software engineering

Desirable

• As a Senior DevSecOps Engineer, you will be a key player in integrating security practices throughout the software development lifecycle
• You will lead initiatives to design, implement, and automate security controls, ensuring the secure development and deployment of applications
• This role requires a strong understanding of security principles, DevOps methodologies, and cloud environments, with a focus on continuous improvement and risk mitigation
• You will collaborate closely with development, operations, and security teams, and mentor junior engineers to foster a culture of security
• Integrate security into the CI/CD pipeline, automating security controls and embedding security throughout the development lifecycle
• Support, and maintain Application Security Testing (AST) tools (SAST, DAST, IAST, SCA) to identify code and dependency vulnerabilities
• Conduct security assessments, vulnerability analysis, and penetration testing to identify and mitigate security risks
• Develop and maintain secure infrastructure as code (IaC) scripts using tools like Pulumi, Terraform, or CloudFormation
• Implement and manage security tools and technologies such as SIEMs, IDS/IPS, firewalls, and endpoint protection
• Monitor and respond to security incidents, performing root cause analysis and implementing corrective measures
• Educate and train development and operations teams on secure coding practices and security tooling
• Stay up to date with the latest security threats, trends, and technologies, and proactively address potential risks
• Create and maintain documentation related to security policies, procedures, and standards
• Participate in security audits and compliance initiatives to ensure adherence to industry regulations and standards
• Provide thorough unit testing and automated testing to ensure a quality product is delivered
• Improve, enhance, and support existing operations
• Design, build, install, configure, and support production deployments
• Manage the work of teams implementing DevOps solutions in complex projects