IT Security Analyst/DevSecOps Engineer

$110,000 - $135,000/Yr

Monolithic Power Systems - Kirkland, WA

Full-time - Mid Level

Kirkland, WA

Computer and Electronic Product Manufacturing

About the position

The IT Security Analyst/DevSecOps Engineer at Monolithic Power Systems, Inc. plays a vital role in safeguarding the organization's computer networks and systems from cyber threats. This position integrates security practices throughout the software development lifecycle, ensuring that security measures are implemented effectively in collaboration with IT and development teams. The role is essential for maintaining compliance with security standards and for fostering a culture of security awareness within the organization.

Responsibilities

• Monitor computer networks for security issues and investigate any breaches or violations
• Perform penetration testing and vulnerability assessments to identify security weaknesses
• Develop security standards and best practices for the organization
• Research the latest IT security trends and emerging threats
• Prepare reports documenting security issues and mitigation efforts
• Collaborate with IT and development teams to implement security measures and upgrades
• Perform log analysis and correlate security events
• Develop and implement automated alert triage systems
• Conduct security awareness training for employees
• Assist in incident response and forensic analysis when security incidents occur
• Integrate security practices into the CI/CD pipeline and software development lifecycle
• Implement and manage automated security testing tools in the development process
• Work with development teams to address security vulnerabilities early in the development cycle
• Ensure compliance with security standards and regulations throughout the development process

Requirements

• Bachelor's degree in computer science, IT, cybersecurity, or related field
• 3+ years of experience in information security or related IT role
• 2+ years of experience with DevOps or DevSecOps practices
• Knowledge of firewalls, proxies, SIEM, antivirus, and IDPS concepts
• Familiarity with ISO 27001/27002, NIST CSF, CIS Controls and other security frameworks
• Experience with vulnerability assessment tools and techniques
• Experience working with RESTful APIs and JSON/XML data formats
• Proficient in implementing and managing identity federation protocols including OIDC and SAML
• Strong analytical and problem-solving skills
• Experience configuring and troubleshooting Single Sign-On (SSO) solutions
• Excellent written and verbal communication abilities
• Proficiency in scripting languages (e.g., Python, Bash, PowerShell) and version control systems (e.g., Git)
• Experience with containerization technologies (e.g., Docker, Kubernetes)
• Familiarity with CI/CD tools (e.g., Jenkins, GitLab CI, Travis CI)
• Knowledge of infrastructure-as-code and configuration management tools (e.g., Terraform, Ansible)

Nice-to-haves

• Relevant certifications like Security+, CEH, CISSP, or CISM preferred

Benefits

• Health care coverage
• Dental and vision insurance
• 401(K)
• Employee Stock Purchase Program (ESPP)
• Up to 11 company paid holidays
• 15-20 days of paid time off depending on tenure
• Generous discretionary company bonuses
• Life and disability protection
• Sales incentive bonuses for employees in sales positions
• Stock compensation for certain positions