DevOps Engineer - Security & Intelligence

About the role

Bamboohr is seeking a talented DevOps Engineer specializing in Security and Intelligence to join our dynamic team. In this role, you will be instrumental in enhancing our security posture while ensuring the seamless operation of our systems. You will work closely with cross-functional teams to implement best practices in DevOps, focusing on security measures that protect our data and infrastructure. This position offers an exciting opportunity to contribute to innovative projects that have a significant impact on our clients and the industry.

Key facts

What you'll do

• Design and implement secure infrastructure solutions that align with industry standards and best practices.
• Collaborate with software development teams to integrate security into the CI/CD pipeline, ensuring that security measures are embedded from the start.
• Monitor and analyze system performance, identifying potential security vulnerabilities and implementing corrective actions.
• Develop and maintain automated deployment scripts and tools to streamline operations and enhance security protocols.
• Conduct regular security assessments and audits to ensure compliance with regulatory requirements and internal policies.
• Provide technical support and guidance to team members on security-related issues and best practices.
• Create and maintain comprehensive documentation for systems, processes, and security protocols.
• Engage in incident response activities, investigating security breaches and implementing measures to prevent future occurrences.
• Stay up-to-date with the latest security trends, technologies, and threats, applying this knowledge to improve our security posture.
• Participate in training sessions to educate team members on security awareness and best practices.
• Collaborate with external partners and stakeholders to ensure that security requirements are met in all projects.
• Contribute to the continuous improvement of DevOps practices within the organization, fostering a culture of security-first thinking.

Requirements

• Proven experience as a DevOps Engineer or in a similar role, with a strong focus on security practices (minimum of 3 years preferred).
• Solid understanding of cloud platforms (AWS, Azure, or Google Cloud) and their security features.
• Proficiency in scripting languages such as Python, Bash, or PowerShell for automation and security tasks.
• Experience with configuration management tools (e.g., Ansible, Puppet, or Chef) to manage infrastructure as code.
• Familiarity with containerization technologies (Docker, Kubernetes) and their security implications.
• Knowledge of security frameworks and compliance standards (e.g., ISO 27001, NIST, GDPR) and their application in a DevOps environment.
• Strong problem-solving skills and the ability to work effectively in a fast-paced, collaborative environment.
• Excellent communication skills, both written and verbal, to convey complex security concepts to technical and non-technical stakeholders.
• Relevant certifications (e.g., AWS Certified Security, Certified Kubernetes Security Specialist) are a plus.
• A proactive attitude towards learning and adapting to new technologies and methodologies.

Nice to have

• Experience with security tools such as SIEM, intrusion detection systems, and vulnerability scanners.
• Familiarity with network security concepts and practices, including firewalls, VPNs, and intrusion prevention systems.
• Knowledge of application security testing tools and methodologies (e.g., SAST, DAST).
• Previous experience in a consulting or client-facing role, providing security solutions to diverse organizations.
• Understanding of Agile methodologies and experience working in Agile teams.

Skills & tools

• Cloud platforms: AWS, Azure, Google Cloud
• Scripting languages: Python, Bash, PowerShell
• Configuration management: Ansible, Puppet, Chef
• Containerization: Docker, Kubernetes
• Security frameworks: ISO 27001, NIST, GDPR
• Security tools: SIEM, vulnerability scanners

Practical notes

• The specific location for this position is currently unspecified and will be determined based on candidate availability and company needs.
• This role may involve occasional travel for training, conferences, or client meetings, depending on project requirements.
• Candidates from diverse backgrounds are encouraged to apply, as Bamboohr values inclusivity and diversity in the workplace.

META

Company: Bamboohr

Title: DevOps Engineer

Security & Intelligence

Job type: Full-time

Apply URL: https://envitia.bamboohr.com/careers/172

Tags: Security, Engineering