Remote Senior DevSecOps Engineer

Description:

• AudiencePlus is seeking a Senior DevSecOps Engineer to embed security into the DevOps process, ensuring applications and infrastructure are secure by design.
• The role involves designing, developing, and maintaining Infrastructure as Code (IaC) scripts using tools like Terraform, Ansible, or CloudFormation to automate cloud resource provisioning.
• Responsibilities include developing, maintaining, and optimizing CI/CD pipelines with a focus on security, automating security checks, and integrating them into the build process.
• The position requires implementing and managing tools for continuous monitoring, vulnerability assessment, and patch management for both infrastructure and applications.
• Ensuring compliance with industry standards and regulations (e.g., GDPR, SOC2) and enforcing security policies across the organization is a key responsibility.
• The Senior DevSecOps Engineer will develop and maintain incident response plans, lead efforts in identifying, responding to, and recovering from security incidents, and collaborate with development, operations, and security teams.
• Implementing and managing logging and monitoring solutions to detect and respond to security threats in real-time and providing guidance and training on secure coding practices and emerging security threats are also part of the role.

Requirements:

• Minimum of 5 years of experience in DevOps with a strong focus on security (DevSecOps).
• Deep understanding of cloud platforms (AWS, GCP) and experience securing cloud-native applications and infrastructure.
• Proficiency in scripting and automation (Python, Bash, PowerShell) and experience with CI/CD tools (Jenkins, GitHub, CircleCI).
• Hands-on experience with security tools such as SAST, DAST, vulnerability scanners, SIEM, and WAF.
• Strong analytical and problem-solving skills with the ability to think critically about potential security threats and develop solutions.
• Relevant certifications such as AWS Certified Security – Specialty are a plus.
• Excellent communication skills to convey complex security concepts to technical and non-technical stakeholders.
• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent experience.

Benefits:

• Opportunity to work with a mission-driven company that prioritizes teammates, families, customers, partners, and investors.
• A culture focused on core values including being excellent to each other, executing out loud, ruthlessly eliminating hurry, and embracing childlike joy.
• Commitment to diversity and inclusion, creating a culture that celebrates diversity and inclusiveness.
• Chance to shape the culture and contribute to creating a generational company transforming the relationship between brands and their communities.