Remote Senior DevSecOps Engineer

Description:

• Design, implement, and maintain secure AWS cloud infrastructure.
• Ensure the security of cloud resources through automated security controls, continuous monitoring, and threat detection.
• Lead the development of security policies, procedures, and practices for cloud infrastructure.
• Develop and maintain automation scripts and tools using Python to streamline security processes and improve efficiency.
• Collaborate with software development teams to integrate security into the CI/CD pipeline, ensuring secure code deployment.
• Implement and maintain infrastructure as code (IaC) practices, ensuring consistency and compliance across environments.
• Work closely with cross-functional teams to ensure alignment on security objectives.
• Lead incident response efforts for security breaches, including investigation, mitigation, and post-incident analysis.
• Stay up-to-date with the latest security threats, technologies, and best practices.
• Conduct regular security assessments, audits, and penetration tests to identify and address vulnerabilities.
• Drive the adoption of new security tools and technologies that enhance security posture.

Requirements:

• Extensive experience with AWS services, including IAM, VPC, ECS, RDS, Lambda, WAF, Cloud Firewall, and others.
• Proficiency with Terraform and Terragrunt for infrastructure as code.
• Strong Python programming skills for automating security and devops processes.
• Knowledge of security best practices, threat modeling, security testing, and vulnerability management.
• Ability to handle and respond to security incidents and breaches.
• Skills in using monitoring tools like DataDog, Prometheus, Grafana, ELK Stack, or Splunk.
• Understanding of network protocols, network architecture, and firewalls.
• Proficiency with intrusion detection and prevention systems.
• Experience with network monitoring tools and SIEM platforms.
• Familiarity with CI/CD pipelines and integrating security tools into the development process.
• Excellent problem-solving skills and the ability to work under pressure.
• Strong communication skills to articulate complex security concepts to technical and non-technical stakeholders.

Benefits:

• Rich Medical, Dental, and Vision plans.
• Discretionary Paid Time Off for unplugging whenever needed.
• Flexible spending account and 401(k) with employer matching vested on day one.
• CrossFit Gym Membership Reimbursement.
• CrossFit Courses Benefit.
• Partnership Perks.