DevSecOps Engineer: Secure CI/CD & Cloud Automation

Berkadia; Ambler (Montgomery County); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Monthly volunteer hours

Donation matching

Employee Resource Groups

Fertility and family planning services

Parental leave (up to 12 weeks)

Mental health care (free counseling)

Tuition reimbursement

Pet insurance discounts

And more!

Job summary

Berkadia is seeking a DevSecOps Engineer to join the Information Security team. The role focuses on researching, developing, and supporting security solutions to uphold secure coding standards across the software development lifecycle.

You will monitor and resolve coding and open-source vulnerabilities, automate secure code scanning, and secure enterprise apps on cloud platforms while collaborating with cross-functional teams to mitigate risks and drive security across pipelines.

Qualifications

• Strong software development knowledge in NodeJS, Python, TypeScript, and related languages.
• Experience in developing and securing software solutions with DevOps/DevSecOps principles.
• Proficiency in building secure, efficient CI/CD pipelines with end-to-end security assessment.
• Expertise in static and dynamic application security testing methodologies and tools.
• Understanding of threat modeling, risk assessment, and cloud-native technologies (Azure, AWS, Kubernetes).

Responsibilities

• Conduct complex, high-skill work with minimal supervision and independent judgment.
• Maintain and optimize the security of CI/CD pipelines and automate secure code scanning processes.
• Secure enterprise applications on cloud platforms with focus on automation, security, and reliability.
• Address known vulnerabilities and mitigate associated risks.
• Collaborate with cross-functional teams on security aspects of CI/CD troubleshooting, automation, and configuration management.

Skills

NodeJS

Python

TypeScript

DevSecOps

CI/CD pipelines

Security testing

Cloud platforms

Kubernetes

Job description

Berkadia is seeking a DevSecOps Engineer to join the Information Security team. The role focuses on researching, developing, and supporting security solutions to uphold secure coding standards across the software development lifecycle.

You will monitor and resolve coding and open-source vulnerabilities, automate secure code scanning, and secure enterprise apps on cloud platforms while collaborating with cross-functional teams to mitigate risks and drive security across pipelines.