Job Overview:

We are seeking a highly skilled and experienced DevSecOps Engineer SME with a strong background in cybersecurity to join our dynamic team. The ideal candidate will have over 7 years of overall cybersecurity experience and possess expertise in DevSecOps practices. This role requires in-depth knowledge of AWS, GitLab, Kubernetes, scripting skills, and a thorough understanding of NIST Cybersecurity and Risk Management frameworks and associated requirements. This is a 6 month contract to hire (eligible for benefits after 90 days).

Responsibilities:

• DevSecOps Implementation: Lead the integration of security practices into the DevOps lifecycle, ensuring the development and deployment of secure and resilient systems.
• Security Automation: Develop and implement automation scripts and tools to streamline security processes within the CI/CD pipeline and infrastructure provisioning.
• Cloud Security: Implement and manage security controls in AWS environments, ensuring compliance with best practices and industry standards.
• Container Security: Enhance the security posture of containerized applications by implementing security measures within Kubernetes and other container orchestration platforms.
• Continuous Monitoring: Implement continuous monitoring solutions to detect and respond to security incidents in real-time.
• Security Compliance: Ensure adherence to NIST Cybersecurity and Risk Management frameworks, including the development and maintenance of documentation to support compliance requirements.
• Collaboration: Work closely with development, operations, and security teams to foster a collaborative culture that prioritizes security at every stage of the development process.
• Incident Response: Develop and maintain incident response plans, and actively participate in security incident investigations and resolution.