DevSecOps SCA Engineer: Secure CI/CD & Open-Source

BMA Group Panama; San Juan (PR); On-site; USD 110,000 - 170,000; Full time

Job summary

[Your Company Name] is seeking a DevSecOps SCA Engineer to integrate security into our DevOps processes and leverage SCA tools to ensure secure software delivery. The role emphasizes open-source management, automation, and cross-functional collaboration to uphold compliance and secure engineering practices.

You will build secure CI/CD pipelines, perform regular SCA scans, and mentor teams on secure coding and risk mitigation in a forward-thinking environment.

Qualifications

• Bachelor’s degree in CS/IT/Cybersecurity or equivalent practical experience.
• Experience with DevOps tools like Jenkins, Git, Azure DevOps.
• Proven expertise in SCA tools: Sonatype Nexus, JFrog X-Ray, Snyk, WhiteSource.
• Proficiency in Python, Bash or Groovy.
• Strong knowledge of open-source ecosystems and licensing models.
• Understanding of secure software development lifecycle and containerization.

Responsibilities

• Embed security into DevOps workflows via CI/CD pipelines.
• Monitor open-source components for vulnerabilities and compliance.
• Develop automation to orchestrate security testing in pipelines.
• Identify vulnerabilities and collaborate with teams to remediate.
• Collaborate with development, operations, and security teams.
• Support audits for GDPR, HIPAA and related standards with SCA data.
• Stay updated on DevSecOps trends and practices.
• Educate teams on secure coding and risk mitigation.

Skills

Jenkins

Git

Azure DevOps

SCA Tools

Python

Bash

Groovy

Kubernetes

Open Source

Education

Bachelor's in CS/IT/Cybersecurity

Tools

Sonatype Nexus

JFrog X-Ray

Snyk

WhiteSource

Job description

[Your Company Name] is seeking a DevSecOps SCA Engineer to integrate security into our DevOps processes and leverage SCA tools to ensure secure software delivery. The role emphasizes open-source management, automation, and cross-functional collaboration to uphold compliance and secure engineering practices.

You will build secure CI/CD pipelines, perform regular SCA scans, and mentor teams on secure coding and risk mitigation in a forward-thinking environment.