Description

Integrate security automation and controls into existing systems and the SDLC.

This role is remote.

Responsibilities

• Design and implement security automation using Python, Bash, and CI/CD tooling.
• Integrate automated security controls, such as SAST and SCA, into the customized SDLC.
• Deploy and customize security policies and assets in the cloud for other teams.
• Work with application teams to onboard cloud security requirements and mitigate vulnerabilities.
• Automate security tasks and perform security-related scanning within pipelines.

Required Skills

• 5+ years of related experience in DevSecOps or security engineering.
• Expert knowledge of Cloud Native Engineering with a focus on GCP.
• Proficiency in Python and Bash for automation and scripting.
• Hands-on experience with Terraform for infrastructure management.
• Proven track record building CI/CD pipelines for applications and infrastructure.
• Strong experience with Linux and Windows server operating systems.
• Experience securing containers at scale and deploying in containerized environments.
• Knowledge of Cloud Security, CNA, and supply chain protection.
• Experience with Wiz for cloud security monitoring.

Preferred Skills

• Experience with GitHub Actions, Jenkins, Ansible, or Concourse.
• Experience with Go for developing and maintaining automation.

Key Skills

Education

Bachelor's Degree