Security Engineer

Security Engineer

We are seeking a motivated and detail-oriented DevSecOps Engineer to join our team. This role is crucial to integrating security practices throughout the software development lifecycle, ensuring our applications and infrastructure are secure from the ground up. Location: Addison, TX Pay: $50-60 Per hour Duration: 6 Month Contract to Hire

Position Summary

The DevSecOps Engineer will be responsible for embedding security controls and automation into our development and operational workflows. You'll work closely with development, operations, and security teams to build secure CI/CD pipelines, automate security testing, and maintain a robust, resilient, and secure application environment.

Key Responsibilities

• Integrate security tools (SAST, DAST, IAST) into the CI/CD pipeline to automate security testing and vulnerability scanning.
• Collaborate with development teams to identify and remediate security vulnerabilities in code.
• Manage and maintain security-related infrastructure, including secrets management systems and key vaults.
• Develop and implement security policies, standards, and controls across the organization.
• Monitor security logs and alerts, and respond to security incidents as needed.
• Stay up-to-date with emerging security threats, technologies, and best practices.
• Provide guidance and training to development and operations teams on secure coding and infrastructure practices.

Requirements

Qualifications

• Proven experience in a DevOps, Security, or related IT role.
• Strong knowledge of CI/CD pipeline tools (e.g., Jenkins, GitLab CI/CD, GitHub Actions).
• Experience with scripting and automation using languages like Python or Bash.
• Solid understanding of containerization technologies, including Docker and Kubernetes.
• Familiarity with security principles and best practices, such as the OWASP Top 10.
• Experience with at least one major cloud platform (e.g., AWS, Azure, GCP).
• Excellent problem-solving, collaboration, and communication skills.

Preferred Skills

• Experience with Infrastructure as Code (IaC) tools like Terraform or Ansible.
• Experience with specific security tools (e.g., Snyk, SonarQube, Aqua Security, Prisma Cloud).
• Knowledge of network security and firewall configuration.
• Relevant certifications, such as CISSP, Certified Kubernetes Security Specialist (CKS), or AWS Certified Security - Specialty.