We are seeking a highly skilled DevSecOps Engineer to support the design and development of a modern Security Operations Center (SOC). The ideal candidate will have expertise in cybersecurity, SOC operations, and software development, with a strong focus on implementing DevSecOps practices, including CI/CD pipelines, automation, and security integration. This role is critical in ensuring that the SOC is agile, scalable, and secure through the adoption of modern DevSecOps methodologies.
Key Responsibilities
- Implement CI/CD pipelines to automate deployment and integration of SOC technologies.
- Integrate security into all stages of the development and deployment lifecycle.
- Develop scripts and tools to automate SOC workflows, including alerting, reporting, and threat detection processes.
- Enhance the SOC's operational efficiency by automating routine tasks and system integrations.
- Design and deploy infrastructure using IaC tools such as Terraform or Ansible to ensure consistency and scalability.
- Ensure SOC infrastructure aligns with security best practices.
- Work closely with the SOC Solution Architect, SIEM Engineer, and Technical Consultant to ensure seamless integration of DevSecOps practices.
- Support the development and deployment of SOC technologies, ensuring their reliability and security.
- Develop and implement monitoring solutions to track system performance and detect anomalies.
- Optimize the SOC's CI/CD pipelines and infrastructure for performance and scalability.
- Create detailed documentation of DevSecOps workflows, CI/CD pipelines, and automation scripts.
- Provide training and guidance to SOC teams on DevSecOps tools and processes.
Qualifications
- Bachelor's or Master's degree in Computer Science, Cybersecurity, or a related field.
- Minimum 57 years of experience in DevSecOps, software development, or SOC environments.
- Proven experience implementing CI/CD pipelines and automation in security-focused projects.
Skills:
- Strong knowledge of cybersecurity principles, SOC operations, and best practices.
- Proficiency in programming and scripting languages (e.g., Python, JavaScript, Bash).
- Expertise in CI/CD tools such as Jenkins, GitLab CI/CD, or Azure DevOps.
- Familiarity with containerization and orchestration tools like Docker and Kubernetes.
- Experience with IaC tools such as Terraform, Ansible, or CloudFormation.
- Strong problem-solving and analytical skills.