DevSecOps Engineer at The Judge Group Inc. in Boston, Massachusetts

Job Description:

Location: REMOTE

Salary: $70,000.00 USD Annually - $85,000.00 USD Annually

Description: Our client is currently seeking a Development Security Operations Engineer (Remote)
The Development Security Operations Engineer will be responsible for applying DevSecOps practices and tools across various cloud environments. This role demands a hands-on contributor with substantial expertise in Azure and extensive knowledge of AWS. The ideal candidate has experience integrating automated security testing, vulnerability scanning, and compliance checks into cloud-native development pipelines. They collaborate with Technology Solution Teams to create and maintain secure cloud resources, conduct regular security assessments, monitor alerts, implement remediation measures, and offer security guidance.


If interested in applying or for more information email rsamuels@judge.com


This job will have the following responsibilities:

• Monitor Azure Security Center alerts and implement remediation actions to address vulnerabilities and compliance issues.


• Stay informed about Azure cloud security best practices and emerging threats.


• Recommend pipeline improvements and implement security enhancements.


• Provide guidance and support to development and operations teams on Azure-specific security configurations and controls.


• Participate in developing and maintaining disaster recovery and incident response plans for multiple cloud environments.


• Implement and maintain processes and tools for cloud environments, ensuring security integration throughout the software development lifecycle (SDLC). This includes designing, refining, and continuously enhancing automated security testing, vulnerability scanning, and compliance checks within development pipelines.


• Design and implement secure CI/CD pipelines using Azure DevOps, incorporating best practice security controls.


• Develop and maintain Azure Resource Manager (ARM) templates and Azure PowerShell scripts for secure cloud resource provisioning and configuration.


• Conduct security assessments and penetration testing of Azure cloud applications and infrastructure.

Qualifications & Requirements:

• Bachelor's degree (required) in Cybersecurity, Technology, Information Systems, Computer Science, or a related field, or equivalent experience.


• Azure Security Engineer Associate or Azure DevOps Engineer Expert preferred.


• 5 years of experience with security practices, tools, and methodologies, including security automation and vulnerability management.


• 3-5 years of experience with proficiency in infrastructure management, including designing, provisioning, and maintaining cloud infrastructure with proven experience in Infrastructure as Code (IaC).


• 5 years of experience in DevSecOps roles.


• 5 years of cloud platform experience with extensive knowledge of both Azure and AWS.


• 3-5 years of development experience with scripting automation and tooling development.


• Knowledge of cybersecurity concepts and frameworks like NIST, CIS, and ISO 27001.


• Proficiency in secure software development practices (e.g., OWASP Top 10), the ability to influence and manage .NET dependencies for UiPath environments, application of security principals to Robotic Process Automation, and proficiency in scripting and automation languages (PowerShell, Python preferred).


• Possess an immersed understanding of Azure IAM and expertise in containerization technologies (Docker, Kubernetes) for secure application deployment and monitoring in Azure Kubernetes Service (AKS). Skilled in Azure security tools and services (Azure Sentinel, Azure Firewall, Azure Key Vault).


• Expertise in API ecosystem orchestration and security, with proven ability to ensure unified integrations and safeguard business processes through secure API design (REST/Graph) evaluation from both development and consumption perspectives.


• Experience with IaC tools (Terraform, ARM) and DevOps automation tools (Jenkins, CircleCI) in Windows and Linux environments with security and monitoring agents.

Contact: rsamuels@judge.com


This job and many more are available through The Judge Group. Find us on the web at www.judge.com Apply Now