DevSecOps Engineer for Translational Data Science

University of Chicago; United States; Presencial; USD 80 000 - 120 000; Tempo integral

Resumo da oferta

The University of Chicago's Center for Translational Data Science is seeking a DevSecOps Engineer to streamline secure software development, automate security checks, and support production security across on-prem and cloud environments. You will work with SAST, SCA, IAST, DAST, and container security tools to improve security posture and incident response.

Responsibilities include collaboration with DevOps teams, implementing security measures, and staying current with industry trends to meet

Qualificações

• Education: A college/university degree in a related field.
• 2–5 years of work experience in a related discipline.
• Certifications in security are a plus.

Responsabilidades

• Evaluate and analyze threat, vulnerability, impact, and risk using SAST, SCA, IAST, DAST, and container security tools.
• Design, build, and maintain security infrastructure for CTDS.
• Advise DevOps and development teams on security improvements and remediation steps.
• Develop DevSecOps metrics, policies, processes, and procedures.
• Provide training on security tooling to developers and stakeholders.
• Assist with automated security checks in CI/CD pipelines.

Conhecimentos

Security mindset

Threat analysis

CI/CD collaboration

Python scripting

Communication

Formação académica

Bachelor's degree in CS/IT or related field

Ferramentas

SAST

SCA

IAST

DAST

Container security

OpenStack

AWS

GCP

Azure

Palo Alto XSOAR

Argo

Helm

Python

Descrição da oferta de emprego

The University of Chicago's Center for Translational Data Science is seeking a DevSecOps Engineer to streamline secure software development, automate security checks, and support production security across on-prem and cloud environments. You will work with SAST, SCA, IAST, DAST, and container security tools to improve security posture and incident response.

Responsibilities include collaboration with DevOps teams, implementing security measures, and staying current with industry trends to meet