devsecops engineer in secure software delivery

HireHi; United States; Remote; USD 90,000 - 130,000; Full time

Benefits offered by this job

Гибридная/удалённая работа

Бонусы до 1000 EUR в месяц

Обучение и сертификации AWS/PMP

Частная медицинская страховка

Корпоративные мероприятия

Job summary

Andersen ищет DevSecOps инженера для интеграции практик безопасности в CI/CD и рабочих流程 разработки. Вы будете внедрять автоматические проверки безопасности, сканирование уязвимостей и управление секретами, сотрудничая с командами разработки и безопасности.

Требуется опыт работы с AWS/Azure/GCP, контейнерной безопасностью, скриптингом и мониторингом через ELK/Prometheus/Grafana. Предлагается гибридный/удалённый формат и развитие карьеры.

Qualifications

• Опыт внедрения безопасных CI/CD процессов и инструментов безопасности.
• Знание конвейеров CI/CD и инструментов SAST/DAST/SCA, сканирования IaC.
• Опыт работы с AWS/Azure/GCP и практики безопасности контейнеров.

Responsibilities

• Интеграция практик безопасности в CI/CD и рабочие процессы разработки.
• Развертывание автоматических проверок безопасности и соответствия.
• Управление секретами, доступами и политиками.
• Мониторинг конфигураций облака и инфраструктуры; устранение рисков.

Skills

CI/CD интеграция

SAST/DAST/SCA

IaC сканирование

Облачные платформы

Безопасность контейнеров

Управление секретами

Скриптинг (Python/Bash)

Мониторинг (ELK/Prometheus/Grafana)

Threat modeling

ГОСТ/ISO SOC2 GDPR знания

Английский (Upper-Intermediate+)

Tools

HashiCorp Vault

AWS Secrets Manager

Docker

Kubernetes

Job description

Описание

Andersen is a global software development company that delivers full-cycle IT services and helps enterprises and fast-growing mid-sized businesses accelerate digital transformation through modern, scalable, and secure software solutions. It operates across a global network of development centers with more than 3,500 professionals.

Задачи

• Integrate security practices into CI/CD pipelines and development workflows
• Implement automated security checks, vulnerability scanning, and compliance validation
• Manage secrets, credentials, and access policies
• Monitor cloud and infrastructure security configurations, identify risks, and implement improvements
• Collaborate with development and security teams to ensure secure application delivery
• Support incident response activities and contribute to root cause analysis
• Develop automation scripts and tools to enhance security processes
• Maintain documentation for security controls, processes, and best practices

Требования

• Have 2.5+ years of experience as a DevSecOps Engineer
• Understand CI/CD pipelines and have experience integrating security tools, including SAST, DAST, SCA, IaC scanning, and compliance control
• Have hands-on experience with AWS, Azure, or GCP
• Know container security, Docker, and Kubernetes security best practices
• Be familiar with secrets management solutions such as HashiCorp Vault and AWS Secrets Manager
• Have scripting skills in Python, Bash, or similar
• Have experience with monitoring and logging tools such as ELK, Prometheus, and Grafana
• Understand threat modeling, vulnerability management, and secure coding principles
• Have English proficiency at Upper-Intermediate level or above
• Nice to have: experience with Zero Trust, IAM, or security governance frameworks, knowledge of ISO 27001, SOC 2, or GDPR, AWS Security Specialty or CKS certification

Условия

• Fully remote, office, or hybrid work options are available
• Up to an additional 1,000 EUR per month depending on expertise, included in the annual bonus
• Professional, financial, and career growth opportunities
• Mentoring and onboarding systems for each new employee
• Access to the corporate training portal
• Certification compensation for AWS, PMP, and other certifications
• Private health insurance and sports compensation depending on the type of employment
• Referral program
• Corporate events and activities