DevSecOps Engineer

Berkadia; Ambler (Montgomery County); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Monthly volunteer hours

Donation matching

Employee Resource Groups

Fertility and family planning services

Parental leave (up to 12 weeks)

Mental health care (free counseling)

Tuition reimbursement

Pet insurance discounts

And more!

Job summary

Berkadia is seeking a DevSecOps Engineer to join the Information Security team. The role focuses on researching, developing, and supporting security solutions to uphold secure coding standards across the software development lifecycle.

You will monitor and resolve coding and open-source vulnerabilities, automate secure code scanning, and secure enterprise apps on cloud platforms while collaborating with cross-functional teams to mitigate risks and drive security across pipelines.

Qualifications

• Strong software development knowledge in NodeJS, Python, TypeScript, and related languages.
• Experience in developing and securing software solutions with DevOps/DevSecOps principles.
• Proficiency in building secure, efficient CI/CD pipelines with end-to-end security assessment.
• Expertise in static and dynamic application security testing methodologies and tools.
• Understanding of threat modeling, risk assessment, and cloud-native technologies (Azure, AWS, Kubernetes).

Responsibilities

• Conduct complex, high-skill work with minimal supervision and independent judgment.
• Maintain and optimize the security of CI/CD pipelines and automate secure code scanning processes.
• Secure enterprise applications on cloud platforms with focus on automation, security, and reliability.
• Address known vulnerabilities and mitigate associated risks.
• Collaborate with cross-functional teams on security aspects of CI/CD troubleshooting, automation, and configuration management.

Skills

NodeJS

Python

TypeScript

DevSecOps

CI/CD pipelines

Security testing

Cloud platforms

Kubernetes

Job description

Be Part of the Next. Be Berkadia.

Berkadia is built on deep expertise, strong relationships, and a commitment to excellence across the commercial real estate industry. What sets us apart is our people. As a values-driven organization, we foster a culture where collaboration thrives, growth is encouraged, and employees are empowered to make an impact. Together, our people strengthen our business and help shape the future of Berkadia. Are you ready to be part of the next?

DevSecOps Engineers play a crucial role in the Information Security team by researching, developing, and supporting the deployment of security solutions to uphold secure coding standards. They are responsible for monitoring and resolving coding and open-source vulnerabilities, ensuring robust protection throughout the software development lifecycle.

Responsibilities

• Conduct complex, high-skill work with minimal supervision, exercising independent judgment.
• Assistteams with security inquiries related to theDevSecOpslifecycle.
• Maintain and optimize the security of CI/CD pipelines, automating secure code scanning processes.
• Secure enterprise applications on cloud platforms, focusing on automation, security, and reliability.
• Maintain and enhance automation for security tasks in application development, design, and debugging.
• Assistteams in addressing known vulnerabilities andmitigatingassociated risks.
• Collaborate with innovation managers on security aspects of CI/CD troubleshooting, automation, and configuration management.
• Identify and verify risks,assigningownershipandassistingin remediation efforts.
• Communicate effectively with both technology and business stakeholders.
• Collaborate and coordinate with peers and team members, activelyparticipatingin career development.
• Take accountability for work assignments and responsibilities.
• Set and adhere to clear timelines for project completion.
• Work collaboratively within a cross-functional, matrixed team environment.
• Demonstrate curiosity and eagerness to learn,exploringnew technologies and ideas to enhance company performance.
• Other duties as assigned.

PreferredQualifications

• Strong software development knowledge in programming languages such as NodeJS, Python, TypeScript, etc.
• Experience in developing and securing software solutions, with a strong understanding of DevOps/DevSecOpsprinciples.
• Proficiencyin building secure and efficient CI/CD pipelines, witha fullend-to-end security assessment capability.
• Expertisein both Static and Dynamic Application Security Testing methodologies and tools, along with best practices for enterprise-scale continuous delivery.
• Comprehensive understanding of security concepts, threat modeling, risk assessment techniques, and cloud-native technologies, including platforms like Azure, AWS, and Kubernetes.

#LI-HG1

We believe People Matter, so we offer benefits that go beyond:

• Monthly paid volunteer hours and donation matching to benefit our communities
• Employee Resource Groups that help you grow with us
• Fertility and family planning services
• Up to 12-weeks of fully paid parental leave
• Mental health care, including free counseling sessions:
• We’ll help you fund your learning journey with generous tuition reimbursement
• Pet insurance discounts
• And more!

Be Your Best Self. Be Berkadia.

Berkadia, as an equal opportunity employer, celebrates our employees’ unique differences, which we believe drives personal and company-wide innovation and creates a people-first culture where your career can take the long view. To achieve these goals, we are committed to the inclusion of all qualified individuals, without regard to race, religion, age, color, national origin, gender, sexual orientation, gender identity or expression, marital status, domestic partner status, military and veteran status, disability, pregnancy, parental status, genetic information, political affiliation, or any other status protected by federal, state and local laws.

In keeping with our commitment, Berkadia takes the necessarysteps to provide a workplace free from harassment, discrimination, and unlawful retaliation, as well as access and reasonable accommodations for individuals with disabilities and sincerely held religious beliefs. If you require a reasonable accommodation to take part in the interview process, please contact [e-mail].

You have rights under federal, state and local employment laws. No question in this Application is intended to elicit information in violation of any such law, nor will any information obtained in response to any question be used in violation of any such law. If you apply for this role, you are acknowledgingBerkadia’s Application PolicyandBerkadia’s Privacy Policy. Please click the following links for more information about:EEOC,Employee Rights under the FMLA,EPPA.