DevSecOps Engineer Job Description Template

Meri Sargsyan

Last updated on August 22, 2024 | 6 min read

Job Description TemplateCybersecurityDevOps

General overview of the role

DevSecOps Engineer operates at the intersection of development, security, and operations. The engineer designs, implements, and manages security practices and tools supporting the entire DevOps lifecycle, including continuous integration and deployment (CI/CD). This role involves collaborating with development, operations, and security teams to ensure the highest security standards are met and maintained.

Typical duties and responsibilities

1. Implement security practices and tools within CI/CD pipelines to integrate security into the DevOps lifecycle.
2. Identify, evaluate, and remediate security vulnerabilities in applications and infrastructure.
3. Develop and manage automated security testing processes and integrate them into CI/CD pipelines.
4. Handle security incidents, including monitoring, analysis, and response.
5. Work with development, operations, and security teams to align security practices with project goals.
6. Set up and manage security monitoring tools and processes.
7. Maintain comprehensive documentation of security practices, procedures, and incidents.
8. Provide training and guidance to team members on security best practices and emerging threats.

Required skills and experience

• At least 2 years of proven work experience in DevSecOps, security engineering, or a related field.
• Bachelor’s degree in Computer Science, Information Security, Physics, Mathematics, or a related technical field.
• Good understanding of security principles, tools, and practices for experience with CI/CD tools (e.g., Jenkins, GitLab CI/CD).
• Proficiency in scripting languages (e.g., Python, Bash).
• Knowledge of security practices for AWS, Azure, or GCP.
• Expertise in vulnerability scanning and assessment tools, such as Nessus, and familiarity with security services like Prisma Cloud, SIEM, SOC, and CrowdStrike.
• Experience with vulnerability scanning and assessment tools.
• Skills in managing security incidents and conducting threat analysis.
• Familiarity with configuration management tools (e.g., Ansible, Puppet).
• Knowledge of API Security, Container Security, and AWS Cloud Security.
• Understanding compliance standards and policies such as PCI-DSS, HIPAA, SOX, GDPR, and CCPA, including related certification and audit processes.
• Strong communication skills, with the ability to effectively convey complex security concepts to technical and non-technical stakeholders.

Nice to have/preferred skills and experience (not required)

• Relevant security certifications such as CISSP, CEH, AWS Certified Security Specialty.
• Experience with security frameworks and standards (e.g., NIST, OWASP).
• Skills in penetration testing and ethical hacking.
• Experience with DevOps tools (e.g., Docker, Kubernetes).
• Master’s degree in Cybersecurity, Computer Science, Information Security, or a related field.

What we offer

• Extensive health and wellness coverage.
• Work-from-home options and flexible hours.
• Paid time off for vacations, holidays, and sick leave.

Here are a few more benefits that, according to Forbes, are valued by employees:

• Retirement savings plans with employer matching, such as 401(k) plans, are significant to employees.
• Early leave on Fridays.
• 4-day work week.
• Private dental insurance.

About us

We recommend including general information about the company, such as its mission, values, and industry focus. For instance, you could say:

“DevsData LLC is an IT recruitment agency that connects top tech talent with leading companies to drive innovation and success. Their diverse team of US specialists brings unique viewpoints and cultural insights, boosting their capacity to meet client demands and build inclusive work cultures. Over the past eight years, DevsData LLC has successfully completed more than 80 projects for startups and corporate clients in the US and Europe”

Explore sample resumes

Explore this effective resume example to guide your focus and priorities during the candidate review.

Contact DevsData LLC

If you’re looking to hire a qualified DevSecOps Engineer, reach out to DevsData LLC at [email protected] or visit www.devsdata.com. The company’s recruitment process is thorough and efficient, utilizing a vast database of over 65,000 professionals.

They are renowned for their rigorous 90-minute interviews to assess candidates’ technical skills and problem-solving abilities.

Additionally, DevsData LLC holds a government-approved recruitment license, ensuring compliance with industry standards and regulations.