DevSecOps Engineer

$135,200 - $151,840/Yr

Randstad - Raleigh, NC

Full-time - Mid Level

Raleigh, NC

Administrative and Support Services

About the position

The DevSecOps Engineer role focuses on integrating security practices within the software development lifecycle (SDLC) to ensure secure and efficient software delivery. This position involves collaborating with development teams, implementing security controls, and automating processes to foster a security-first culture. The engineer will also manage security tools and technologies, monitor security incidents, and automate infrastructure management.

Responsibilities

• Integrate with development teams to support security best practices into the software development lifecycle (SDLC).
• Implement security controls and tools early in the development process.
• Design and develop automated security testing frameworks and pipelines.
• Conduct code reviews and security assessments to identify vulnerabilities and risks.
• Work with developers to remediate security issues in a timely manner.
• Implement and manage security tools and technologies, such as intrusion detection systems (IDS), web application firewalls (WAF), and security information and event management (SIEM) systems.
• Monitor and analyze security logs and alerts to detect and respond to security incidents.
• Stay up-to-date with the latest security threats, vulnerabilities, and mitigation strategies.
• Automate the deployment, configuration, and management of infrastructure and applications.
• Monitor the performance and health of systems and applications.
• Implement and maintain monitoring and logging solutions.
• Troubleshoot and resolve operational issues in a timely manner.

Requirements

• Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent experience.
• 5+ years of experience in a DevSecOps or similar role.
• Strong understanding of software development methodologies, security principles, and cloud infrastructure.
• Experience with Terraform.
• Experience with Microsoft Azure.
• Experience with Azure DevOps or similar CI/CD pipelines and tools (e.g., Jenkins, GitLab CI/CD, CircleCI).
• Proficiency in scripting languages (e.g., Bash, Python, Ruby).
• Strong problem-solving, analytical, and communication skills.

Nice-to-haves

• Experience with containerization and orchestration technologies (e.g., Docker, Kubernetes).
• Experience with security testing tools (e.g., OWASP ZAP, Burp Suite).
• Experience working in a fully Agile environment.

Benefits

• Health insurance
• 401K contribution
• Incentive and recognition program