DevSecOps Engineer

Creative Solutions Services, LLC; Newark (NJ); On-site; USD 80,000 - 110,000; Full time

Job summary

An established industry player is seeking a skilled professional in Digital Forensics and Information Security. This exciting role involves providing security services and support, implementing and testing automation features in CI/CD pipelines, and integrating security tools to ensure robust vulnerability assessments. You will collaborate with colleagues globally, driving consistency and standardization of DevSecOps services across the enterprise. If you are passionate about security in cloud environments and thrive in an agile setting, this opportunity is perfect for you.

Qualifications

• Educated to degree level in Digital Forensics, Information Security, or related discipline.
• Hold relevant industrial security or DevSecOps certifications, or willingness to acquire.

Responsibilities

• Provide security services and support for business groups.
• Implement, integrate, and test security scan automation features in CI/CD pipelines.

Skills

Jenkins

Automation Scripts

Burp Suite Enterprise

Checkmarx

NowSecure

OWASP ZAP

APIs

Ansible

Python

Jira

Confluence

Education

Degree in Digital Forensics

Degree in Information Security

Degree in DevOps

Degree in IT-related discipline

Tools

Jenkins

Burp Suite Enterprise

Checkmarx

NowSecure

OWASP ZAP

Jira

Confluence

Job description

Experience Required

• Should be educated to degree level in Digital Forensics, Information Security, DevOps, or an IT-related discipline.

• Should hold relevant industrial security / DevSecOps / DevOps certifications, or willingness to acquire.

• Provide security services and support for Prudential's business groups. Interact directly with Prudential colleagues globally to perform DevSecOps services. Responsible for implementing, integrating, and testing security scan automation features in CI/CD pipelines.

Skills:

• Familiar with Jenkins-based CI/CD Pipelines.
• Experience in implementing and testing automation scripts and setups.
• Familiar with integrating security tools and providing vulnerability assessments using tools such as Burp Suite Enterprise, Checkmarx, NowSecure, OWASP ZAP.
• Understanding of OWASP Top 10 and SANS Top 25 vulnerabilities and remediation strategies.
• Working knowledge of using APIs to interact with web services provided by tools.
• Experience in conducting tool evaluations and building proof of concepts.
• Ability to integrate with reporting tools to provide a consolidated view.
• Ability to translate technical standards into practical applications.
• Assist in driving consistency and standardization of DevSecOps services across the enterprise.
• Strong automation and Infrastructure as Code (IaC) skills, especially with Ansible and Python.
• Maintain documentation and user guides.
• Knowledge of security within cloud environments, particularly around networking, security, and administration.
• A motivated and flexible approach to work in an agile environment utilizing tools such as Jira, Jira Align, Miro, Confluence.
• Demonstrate strong performance ethos and commitment to outstanding customer service.
• Ability to interface effectively with both technical and non-technical teams.
• Willingness to train and upskill continuously.
• Excellent communication, time management, and organizational skills.