Dev Security Engineer

Numerator; Chicago (IL); On-site; USD 80,000 - 120,000; Full time

Job summary

An innovative firm is seeking a DevSecOps Engineer to enhance the security of its data assets. This role involves leveraging cloud-based security tools and automation to ensure applications meet security standards. You will collaborate across teams, implementing best practices and tools to foster a secure environment. If you're passionate about security and eager to contribute to meaningful projects, this is the opportunity for you. Join a talented team and play a key role in shaping the future of security within a dynamic organization.

Qualifications

• Experience with cloud-based security tools and CI/CD practices.
• Strong understanding of security principles and their application.

Responsibilities

• Enhance security across the company with cloud-based tools.
• Build automation scripts to streamline security access for developers.

Skills

Cloud-based security tools

Automation scripting

CI/CD pipelines

Security principles

Continuous learning

Team collaboration

Problem-solving

Education

3+ years as Site Reliability Engineer or DevSecOps Engineer

Tools

AWS

Azure

GCP

Terraform

Bash

Kubernetes

Docker

Jenkins

Git

GitHub Actions

Job description

Numerator is looking for a DevSecOps Engineer with a focus on security to ensure the safety and reliability of our data assets.

As part of our team, you will leverage your security experience to develop solutions that balance security and ease of implementation. You will bring your willingness to learn and enthusiasm to contribute to the future growth of our applications and environment. You will join our distributed Security team, collaborating with Hosting, Engineering, and Data Science teams to shape Numerator’s infoSec.

If you seek an environment where you can do meaningful work alongside talented engineers, we want to hear from you!

What You'll Do:

• Utilize cloud-based security tools to enhance security across the company.
• Build tools and automation scripts to enable developers to easily access security services.
• Improve security accessibility through automation, CI/CD pipelines, and other methods.
• Assist in hardening security best practices, ensuring applications conform to security standards.
• Implement security tools across various codebases and languages to automate processes.
• Stay updated with the latest security best practices and technologies.
• Maintain 3+ years of experience as a Site Reliability Engineer or DevSecOps Engineer.
• Participate in on-call rotations for inbound CVE & Alerts, including investigation, triage, and remediation coordination.
• Familiarity with or exposure to tools and systems such as AWS, Azure, GCP (preferably AWS), CI/CD practices, Terraform, Bash, Kubernetes, Docker, Atlantis, Jenkins, Git, GitHub Actions.
• Development experience with at least one modern language such as Python (preferred), Ruby, or Java.
• Understanding of security principles and their application.
• Up-to-date knowledge of current security practices and software.
• Knowledge of infrastructure as code and its benefits.
• Motivation for continuous learning through pair programming, TDD, code reviews, and adopting new technologies.
• A strong sense of ownership and pride in your work.
• Ability to identify opportunities and foster a culture of innovation.

• Experience working with geographically distributed engineering teams.
• Knowledge of CIS Benchmarks & Controls.
• Experience in fast-paced environments.
• Background in Agile software development.
• Experience collaborating with federated application teams.
• Familiarity with GitHub Advanced Security.