Development Security & Operations Engineer

Seaboard Marine; Miami (FL); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

401(K) Retirement Saving Plan w/ Employer Match

Low-Cost Health, Dental & Vision insurance

Tuition & Certification Reimbursement

Paid Time Off

Parental Leave

Paid holidays

Job summary

A logistics company located in Miami is looking for a DevSecOps Engineer. The role involves integrating security into the software development life cycle, managing security processes, and collaborating with different teams. Candidates should have a Bachelor's degree in Computer Science or 10 years of relevant experience, proficiency in programming and scripting, and strong communication skills. The position offers long-term employment with opportunities for growth and excellent employee benefits.

Qualifications

• Bachelor’s degree in Computer Science or related field, or min 10 years in cybersecurity.
• Experience in DevOps or cybersecurity roles.
• Proficiency in programming and scripting languages.

Responsibilities

• Implement security tools in the CI/CD pipeline.
• Conduct security assessments and vulnerability testing.
• Collaborate with developers for secure coding practices.

Skills

Programming languages (Python, Java, Ruby)

CI/CD tools proficiency

Cloud environment security skills

Understanding of security principles

Communication skills

Risk assessment techniques

Vulnerability assessment knowledge

Education

Bachelor’s degree in Computer Science, Information Security, or a related field

Tools

Security tools

Automation tools

Cloud service providers (AWS, Azure)

Job description

Long-term employment with opportunities for growth.

Discover more about our organization, culture, and employee benefits by visiting this page.

Explore life at Seaboard Marine: https://explore.seaboardmarine.com/pomrecruitment

We offer excellent benefits including:

• 401(K) Retirement Saving Plan w/ Employer Match
• Low-Cost Health, Dental & Vision insurance (Starting DAY ONE)
• Tuition & Certification Reimbursement
• Paid Time Off – (15 Days; prorated before 1st year)
• Parental Leave
• Paid holidays

Position Summary

The development, security, and operations (DevSecOps) Engineer ensures that security is a core part of the software development life cycle (SDLC) by integrating security practices and tools into the company development process. They understand and explain to developers and management the security aspect of development and how to build secure codes. Effective interpersonal and communication skills and the ability to work with the security and development teams are required for this role. This position will manage and execute the DevSecOps process daily. It will use tools to perform code scans and verifications and collaborate with the development teams and management to analyze the codes, show remediation steps, and identify areas for improvement. It will also work with developers and operations staff to ensure security is a shared responsibility, maintaining a culture of security awareness. To perform this job successfully, an individual must be able to satisfactorily perform each essential duty. The requirements listed below are representative, but not necessarily a complete list, of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions.

Geographic Region

Applications out of the geographic region for this position will not be considered.

Qualifications

Required

• Bachelor’s degree in Computer Science, Information Security, or a related field. In lieu of a degree, a minimum 10 years’ experience in cybersecurity and/or development.
• Proven experience in a DevOps, cybersecurity, or related role.
• Proficiency in programming languages such as Python, Java, or Ruby, and scripting languages for automation tasks.
• Familiarity with CI/CD tools, container orchestration, and infrastructure as code (IaC) tools.
• A strong understanding of security principles, practices, and tools. This includes knowledge of threat modeling, risk management, security protocols, encryption technologies, and vulnerability assessment.
• Understanding of risk assessment techniques and security best practices.
• Skills in securing cloud environments, including experience with cloud service providers like Azure and AWS and understanding of cloud-native security tools and practices.
• Understanding of network architectures, protocols, and secure network design. Knowledge of system administration is also crucial for securing the underlying infrastructure.
• Awareness of legal and regulatory requirements related to information security, such as GDPR, HIPAA, and SOC 2.
• Ability to identify security issues and vulnerabilities and develop effective and efficient solutions or mitigations.
• Strong communication skills to effectively collaborate with development, operations, and business teams, and to promote a culture of security awareness.
• Commitment to staying updated with the latest security trends, threats, and technologies, and the willingness to continuously learn and adapt.
• Skills in handling security breaches and incidents, including the ability to lead or participate in incident response efforts.

Duties and Responsibilities

Primary

• Implement and maintain security tools and practices within the CI/CD pipeline.
• Conduct regular security assessments and vulnerability testing to identify and mitigate risks.
• Collaborate with software developers to incorporate secure coding practices.
• Use tools to automate scans, code verification, and other security tasks.
• Automate security processes to ensure seamless integration into the development workflow.
• Monitor and respond to security incidents, ensuring rapid and effective resolution.
• Stay updated with the latest security threats and trends and advise on necessary updates or changes to security protocols.
• Work with cloud-based infrastructures, ensuring they are securely configured and compliant with industry standards.
• Promote a culture of security awareness across the organization.

Secondary

• Provides IT support for regulatory and compliance activities.
• Creates helpdesk support tickets.
• Keeps IT informed on tips and techniques to enhance cyber security posture.
• Recommends security enhancements.
• Additional duties as assigned.

Physical Requirements

• The employee is continuously required to sit and use his fingers.
• The employee frequently is required to talk and/or hear.
• The employee is frequently required to stand and walk.The employee must occasionally lift and/or move up to 10 pounds.
• Specific vision abilities required by this job include close vision, distance vision, color vision, peripheral vision, depth perception, and ability to adjust focus.

Safety Requirements

• Report safety hazards.
• Immediately report incidents involving injury, illness, or property damage.
• Wear protective PPE (Personal Protective Equipment) as instructed or necessary.
• Comply with all company safety policies, procedures, and rules.
• Refuse any unsafe task or operation.
• Participate in safety meetings and training.
• Be constantly aware of their personal safety and that of their coworkers.

Supervision Received and Exercised

Reports directly to the Senior Manager - IT Security. Does not exercise supervision over other staff.

Conditions

• Work is performed primarily in the office.
• The noise level in the work environment is usually quiet to moderate when work is performed in the office environment.

Disclaimer

• We are an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other protected characteristic as outlined by federal, state, or local laws.
• If an applicant with a disability is unable or limited in their ability to use or access our online application center as a result of their disability, they can request reasonable accommodations by sending an email to [e-mail]
• The duties listed above are intended only as illustrations of the various types of work that may be performed. The omission of specific statements of duties does not exclude them from the position if the work is similar, related or a logical assignment to the position.
• The job description does not constitute an employment agreement between the employer and employee and is subject to change by the employer as the needs of the employer and requirements of the job change.