DevSecOps Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Collaborate across departments including InfoSec, SRE, and Engineering teams.

• Stay informed about the latest vulnerabilities in the DevOps landscape, and address them by patching, mitigating, or obtaining acceptance of the vulnerability in alignment with InfoSec standards.

• Review code and repositories for insecure coding practices, partnering with Engineering teams to rectify issues.

• Work in conjunction with InfoSec to develop and sustain Secure SDLC training programs.

• Perform security-focused quality assurance on pre-deployment packages, and determine approval or rejection of these deployments based on security assessments.

• Execute security-oriented quality assurance activities such as dynamic and static code testing.

• Collaborate closely with Compliance and Engineering teams to carry out pre-project risk evaluations.

• Integrate security checks and procedures within CI/CD pipelines to guarantee secure code deployment and infrastructure.

• Create automation scripts and tools to enhance security processes, including vulnerability scanning, patch management, and incident response.

• Deliver security training and awareness initiatives for engineering teams to foster a culture prioritizing security.

⛳️ Requirements

• Bachelor's Degree in Computer Science/Engineering or equivalent professional experience.

• Over 3 years of development experience in an enterprise setting.

• At least 2 years of experience in security, risk, or compliance roles.

• In-depth knowledge of security tools and best practices, including vulnerability scanning (e.g., Nessus, Qualys), SAST/DAST, and container security tools.

• Expertise in scripting and automation languages, particularly Infrastructure as Code (IaC) tools such as Terraform, Crossplane, etc.

• Familiarity with various development methodologies, tools, and CI/CD platforms such as Bitbucket, Gitlab, Github, Circle CI, Travis CI, Argo CD, and Azure DevOps.

• Security and DevOps certifications are highly desirable.

🏝️ Benefits

• Competitive compensation packages.

• Health insurance premiums fully covered for yourself.

• 401k plan with company matching contributions.

• Assistance with tuition and student loan repayments (yes, Roadie will make contributions directly to your existing student loans!).

• Flexible work schedule accompanied by unlimited paid time off (PTO).

• Enjoy monthly 3-day weekends.

• Monthly stipend for working from home.

• Paid sabbatical leave – long-serving team members are given the opportunity to rest, recharge, and explore.

• Access to the technology necessary to perform your job effectively.