The Weather Company - SkillBridge - DevSecOps Engineer
Requirements
• Skills needed: DevSecOps experience, understanding of build automation processes and tools such as GitHub Actions, Vercel, Jenkins, TravisCI; expertise with container technologies like Docker, Kubernetes, Helm; familiarity with different compliance standards (SOC2, CMMC, NIST, ISO); ability to script/code in at least two of the following languages: bash, perl, python, ruby, groovy, JavaScript, PHP. • Years of experience required: 5+ years as a DevSecOps engineer • Education and certifications mentioned: None stated explicitly; however, familiarity with compliance standards suggests relevant education or training in this area may be beneficial but is not mandated by the job posting itself. • Must-haves/Must have skills: Experience working within agile/scrum processes to ensure security deliverables are integrated into product delivery processes; ability to collaborate and coordinate with 3rd party security consultants, manage audit processes, triage results with the team.
Responsibilities
• Set up and automate regular system patching. • Set up and automate static and dynamic code scanning. • Set up and automate vulnerability scanning. • Automate the creation of tickets and production of evidence from scanning tasks. • Automate change management processes. • Build security and compliance dashboards and reports. • Perform security reviews on build environments, ensure systems are maintained with latest patches, follow best practices for cybersecurity. • Participate in agile/scrum processes to integrate security deliverables into product delivery. • Collaborate and coordinate with third-party security consultants. • Manage audit processes and triage results with the team.
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT