DevSecOps Engineer

At Technical - Hanover, MD

Full-time

Hanover, MD

Construction of Buildings

About the position

The DevSecOps Engineer position is a critical role within our Information Technology team, focusing on integrating security practices into the DevOps process. This position requires a strong foundation in software development, automation, and security architecture, ensuring that security is a fundamental part of the software development lifecycle. The ideal candidate will have a Bachelor's Degree in Computer Science, Information Technology, or a related field, along with proven hands-on technical experience in software development, automation, and security practices. In this role, you will be responsible for analyzing and modeling data to enhance security measures across our applications and infrastructure. You will work closely with development teams to implement secure coding practices and ensure compliance with established security frameworks. Your expertise in vulnerability and patch management will be essential in identifying and mitigating risks associated with our technology stack. Additionally, you will leverage your knowledge of data protection, threat detection, and edge security to enhance our overall security posture. The position also requires familiarity with secure development frameworks such as the Microsoft Security Development Lifecycle, OWASP Top 10, NIST SSDF, and CIS Top 20. You will be expected to stay updated on the latest security trends and technologies, applying this knowledge to improve our security processes continuously. Your ability to work with various programming languages, including Python, Go, PHP, and JavaScript, will be crucial in developing secure applications and automating security tasks. This role is based in Hanover, MD, and requires a minimum of 5 years of experience in a related field. You will be part of a dynamic team dedicated to enhancing our security practices and ensuring the integrity of our systems and data.

Requirements

• Bachelor's Degree in Computer Science, Information Technology, or related field
• Proven hands-on technical experience in software development, automation, security architecture, appSec, or DevSecOps
• Extensive expertise in data analysis, modeling, and design
• Familiarity with application/infrastructure security datasets and knowledge of vulnerability and patch management
• In-depth working knowledge in technology domains such as data protection, threat detection, edge security, and software development
• Proven experience with secure development frameworks such as Microsoft Security Development LifeCycle, OWASP Top 10, NIST SSDF, CIS Top 20

Nice-to-haves

• Experience with security frameworks such as NIST CSF, CIS Cybersecurity Framework, NIST 800-53
• Advanced technical knowledge of server hardware, operating systems, and applications
• Experience with AWS and other public cloud services
• Proficiency in programming languages such as Python, Go, PHP, JavaScript, and others