What are the responsibilities and job description for the Dev Sec Ops Engineer position at Judge Group, Inc.?
Location: Boston, MA
Salary: $125,000.00 USD Annually - $140,000.00 USD Annually
Description:
1. Secure SDLC & Application Security Embed security controls at every stage of the SDLC.
Conduct threat modeling, secure code reviews, and risk assessments.
Implement SAST, DAST, SCA tools and interpret results for development teams.
Enforce secure coding standards and promote security-first development culture.
2. CI/CD Pipeline Security
Build and maintain secure CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins, Azure DevOps).
Automate security scanning and policy enforcement in build and deployment workflows.
Integrate secrets management and environment hardening into pipelines.
3. Cloud & Infrastructure Security
Implement Infrastructure as Code (IaC) security reviews using Terraform, CloudFormation, ARM, or Pulumi.
Validate and enforce cloud security best practices (AWS, Azure, Google Cloud Platform).
Deploy and maintain cloud-native security tools such as AWS GuardDuty, Azure Defender, Google Cloud Platform SCC.
4. Container & Kubernetes Security
Build secure container images and manage scanning (Trivy, Aqua, Clair, Prisma Cloud).
Enforce Kubernetes hardening controls (RBAC, network policies, pod security).
Monitor cluster security posture and remediate vulnerabilities.
5. Security Automation & Tooling
Develop automated playbooks/scripts using Python, Bash, or PowerShell.
Integrate SIEM/SOAR platforms with build/deployment workflows.
Automate vulnerability management workflows and remediation processes.
6. Compliance & Governance
Support adherence to NIST, ISO 27001, SOC 2, PCI-DSS, and internal security policies.
Implement guardrails and policy-as-code using OPA, Conftest, or AWS/Azure policy engines.
Produce audit-ready documentation and reporting.
By providing your phone number, you consent to: (1) receive automated text messages and calls from the Judge Group, Inc. and its affiliates (collectively "Judge") to such phone number regarding job opportunities, your job application, and for other related purposes. Message & data rates apply and message frequency may vary. Consistent with Judge's Privacy Policy, information obtained from your consent will not be shared with third parties for marketing/promotional purposes. Reply STOP to opt out of receiving telephone calls and text messages from Judge and HELP for help.
Contact:
This job and many more are available through The Judge Group. Please apply with us today!
Salary: $125,000.00 USD Annually - $140,000.00 USD Annually
Description:
1. Secure SDLC & Application Security Embed security controls at every stage of the SDLC.
Conduct threat modeling, secure code reviews, and risk assessments.
Implement SAST, DAST, SCA tools and interpret results for development teams.
Enforce secure coding standards and promote security-first development culture.
2. CI/CD Pipeline Security
Build and maintain secure CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins, Azure DevOps).
Automate security scanning and policy enforcement in build and deployment workflows.
Integrate secrets management and environment hardening into pipelines.
3. Cloud & Infrastructure Security
Implement Infrastructure as Code (IaC) security reviews using Terraform, CloudFormation, ARM, or Pulumi.
Validate and enforce cloud security best practices (AWS, Azure, Google Cloud Platform).
Deploy and maintain cloud-native security tools such as AWS GuardDuty, Azure Defender, Google Cloud Platform SCC.
4. Container & Kubernetes Security
Build secure container images and manage scanning (Trivy, Aqua, Clair, Prisma Cloud).
Enforce Kubernetes hardening controls (RBAC, network policies, pod security).
Monitor cluster security posture and remediate vulnerabilities.
5. Security Automation & Tooling
Develop automated playbooks/scripts using Python, Bash, or PowerShell.
Integrate SIEM/SOAR platforms with build/deployment workflows.
Automate vulnerability management workflows and remediation processes.
6. Compliance & Governance
Support adherence to NIST, ISO 27001, SOC 2, PCI-DSS, and internal security policies.
Implement guardrails and policy-as-code using OPA, Conftest, or AWS/Azure policy engines.
Produce audit-ready documentation and reporting.
By providing your phone number, you consent to: (1) receive automated text messages and calls from the Judge Group, Inc. and its affiliates (collectively "Judge") to such phone number regarding job opportunities, your job application, and for other related purposes. Message & data rates apply and message frequency may vary. Consistent with Judge's Privacy Policy, information obtained from your consent will not be shared with third parties for marketing/promotional purposes. Reply STOP to opt out of receiving telephone calls and text messages from Judge and HELP for help.
Contact:
This job and many more are available through The Judge Group. Please apply with us today!
Salary : $125,000 - $140,000