Security Specialist – DevOps/SRE Engineer

Highbrow LLC; Frisco (TX); On-site; USD 80,000 - 120,000; Full time

Job summary

A technology firm in Texas seeks a Security Specialist – DevOps/SRE Engineer to enhance security measures and conduct penetration testing. The ideal candidate will collaborate with teams to ensure security best practices in development, monitor incidents, and maintain compliance with industry standards. Strong familiarity with APIs, cloud security, and related tools is essential. Relevant certifications are a plus, and the role requires effective communication and collaboration skills, ensuring a robust security posture.

Qualifications

• Proven experience in conducting penetration testing and internal bug bounties.
• Strong understanding of API and microservice architecture.
• Knowledge of security best practices and standards.

Responsibilities

• Conduct penetration testing to identify vulnerabilities.
• Perform internal bug bounties to address security flaws.
• Collaborate with teams to integrate security best practices.

Skills

Conducting penetration testing

Understanding of API architecture

Knowledge of OWASP and NIST

Familiarity with cloud security

Analytical and problem-solving skills

Excellent communication skills

Relevant security certifications

Tools

SIEM

IDS/IPS

Vulnerability scanners

Job description

Job Title :- Security Specialist – DevOps/SRE Engineer

Employment Type :- W2

Duration :- Long Term

Visa Type :- All Visa applicable which are ready for W2 except H1B

Location- Onsite atFrisco, TX

Key Responsibilities:

1. Conduct/Coordinate penetration testing to identify vulnerabilities in our systems and applications.
2. Perform/Coordinate internal bug bounties to discover and address security flaws.
3. Understand and implement security measures for API and microservice architecture.
4. Collaborate with development teams to integrate security best practices into the software development lifecycle.
5. Monitor and respond to security incidents and breaches.
6. Develop and maintain security policies, procedures, and documentation.
7. Conduct security assessments and audits to ensure compliance with industry standards and regulations.

Required Skills and Experience:

1. Proven experience in conducting penetration testing and internal bug bounties.
2. Strong understanding of API and microservice architecture.
3. Knowledge of security best practices and standards (e.g., OWASP, NIST).
4. Experience with security tools and technologies (e.g., SIEM, IDS/IPS, vulnerability scanners).
5. Familiarity with cloud security (e.g., AWS, Azure).
6. Strong analytical and problem-solving skills.
7. Excellent communication and collaboration skills.
8. Relevant certifications (e.g., CISSP, CEH, OSCP) are a plus.

Preferred Skills:

1. Experience with DevSecOps practices and tools.
2. Knowledge of secure coding practices and code review.
3. Familiarity with regulatory compliance requirements.
4. Experience with threat modeling and risk assessment.
5. Ability to stay updated with the latest security trends and threats.