Security Engineer

EKHP Consulting, LLC; Austin (TX); In loco; USD 110.000 - 160.000; Tempo pieno

Descrizione del lavoro

EKHP Consulting, LLC is seeking a DevSecOps Engineer to lead the administration, implementation, maintenance, and adoption of enterprise software development, security, and delivery platforms. You will integrate security and automation into the SDLC while collaborating with development, infrastructure, and security teams to improve quality and delivery velocity.

The role focuses on Veracode and SonarQube administration, GitLab operations, and CI/CD pipeline improvements to drive secure, reliable

Competenze

• Experience administering Veracode platform and onboarding teams.
• Experience administering SonarQube environments and CI/CD integration.
• Experience configuring and maintaining GitLab self-managed environments.
• Experience designing and maintaining CI/CD pipelines with security integration.
• Knowledge of IaC, automated testing, and deployment automation.

Mansioni

• Administer Veracode platform, user provisioning, and policy configuration.
• Administer SonarQube environments and integrate into CI/CD.
• Administer GitLab self-managed environments and upgrades.
• Design and optimize CI/CD pipelines using GitLab.
• Integrate security testing, code quality, and deployment automation.
• Develop platform documentation and operational procedures.

Conoscenze

CI/CD Automation

DevSecOps

IaC

Security Scanning

CI/CD Tooling

Jira Administration

Strumenti

Veracode

SonarQube

GitLab

Jira

Descrizione del lavoro

The DevSecOps Engineer will support the administration, implementation, maintenance, and adoption of enterprise software development, security, and delivery platforms. This role will serve as a technical subject matter expert responsible for integrating security, automation, and operational best practices into the software development lifecycle (SDLC). The engineer will collaborate with development teams, infrastructure teams, cybersecurity personnel, and business stakeholders to improve software quality, security posture, and delivery efficiency.

Primary Responsibilities

Veracode Administration and Onboarding

• Administer and maintain the Veracode platform, including user provisioning, role management, policy configuration, and system governance.
• Support onboarding of application teams to Veracode security scanning capabilities.
• Configure and support SAST, DAST, SCA, container, and other application security scanning services.
• Assist development teams with vulnerability remediation activities and security best practices.
• Develop documentation, standards, training materials, and operational procedures.

SonarQube Administration and Onboarding

• Administer and maintain SonarQube environments, projects, quality profiles, quality gates, and user access controls.
• Onboard application teams and integrate SonarQube into CI/CD pipelines.
• Support code quality initiatives and assist teams with remediation of technical debt and code quality issues.
• Establish and maintain enterprise coding standards and reporting metrics.

GitLab Administration and Maintenance

• Administer and maintain GitLab Self-Managed environments.
• Configure projects, groups, repositories, runners, permissions, integrations, and security settings.
• Perform platform upgrades, maintenance, monitoring, troubleshooting, and capacity management.
• Support source code migration and repository onboarding activities.
• Maintain operational procedures, standards, and platform documentation.

CI/CD Pipeline Development and Automation

• Design, build, maintain, and optimize CI/CD pipelines using GitLab.
• Develop reusable pipeline templates and automation frameworks.
• Integrate security testing, code quality validation, compliance controls, and deployment automation into software delivery workflows.
• Support Infrastructure-as-Code (IaC), automated testing, release management, and deployment processes.
• Implement DevSecOps best practices to improve reliability, consistency, and delivery velocity.
• Administer Jira projects, workflows, permissions, issue types, dashboards, reports, and automation rules.
• Support project teams with onboarding, configuration, and governance activities.
• Configure integrations between Jira and software development platforms including GitLab and other enterprise tools.
• Develop reporting and dashboards to improve project visibility and operational metrics.

Expected Outcomes

• Successful onboarding and support of application teams to enterprise DevSecOps platforms.
• Increased adoption of automated security and quality controls across the SDLC.
• Improved software delivery efficiency and standardization.
• Reduction in security vulnerabilities and technical debt.
• Enhanced operational stability, compliance posture, and software development maturity.