Security Engineer

We are looking for a passionate Security Engineer to join a new project that will support the modernization of a web-based .NET system into the Azure Cloud using various cutting-edge technologies.  Additionally, the goal of this project will be to automate the customer’s manual processes.   The software development lifecycle will leverage an Agile framework with DevSecOps processes using Agile teams, and we need a passionate Security engineer to be responsible for integrating security practices into the DevOps pipeline.

What will you do:

This requisition is for a Security engineer to support an Agile team to modernize the legacy system and automate the manual processes. 

The Security Engineer is expected to:

• Merge development, security and operations elements to improve end-to-end system security.
• Design and implement secure automation solutions for development, testing and production environments.
• Develop and maintain CI/CD pipelines across multiple environments.
• Run and report on security findings in software builds.
• Understand and remediate system vulnerabilities and security issues.
• Collaborate with team members to improve the customer’s engineering tools, systems, procedures, and data security.
• Create and maintain security-related documentation.
• Stay current with security industry trends, including emerging threats and security solutions.
• Support incident response and problem management teams by providing containment actions and incident analysis.
• Developing strategies for security and scalability.
• Work with the customer, team and the customer’s technical resources to understand the customer’s DevSecOps requirements.
• Support Agile teams in Backlog planning, work item refinement and story point analysis.
• Ensure that User Stories have well-defined acceptance criteria.
• For User Stories assigned to the engineer, ensure that work meets the acceptance criteria and is completed by the end of the sprint.
• Demonstrate work completed in a sprint to the customer, if applicable.
• Support sprint retrospectives and incremental improvements based on feedback.
• Implement solutions using industry standard patterns and best practices.
• Provide production and operational support, as needed, to ensure deployed software meets functional and non-functional requirements.

Basic Qualifications:

• Bachelor’s degree and 5 years of experience. An additional 4 years of experience will be accepted in lieu of the degree.
• Experience automating and modernizing IT solutions.
• Experience with implementing and using GitHub to leverage CI/CD pipelines and DevSecOps deployments.
• Experience with Microsoft Azure Cloud migrations and microservices, virtualization and containerized deployments.
• Proven work experience as a Security Engineer or similar role in supporting Software development, operations, and security.
• Knowledge of cloud technologies and architectures (Azure, AWS, Google Cloud).
• Experience in secure coding practices and automating security testing tools.
• Understanding of network and web related protocols (TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols).
• Proficient with containerization technologies like Docker and orchestration tools like Kubernetes.
• Experience with automation scripts and configuration management tools.
• Ability to execute in a remote team environment.
• Must be a US Citizen or a Green Card Holder (Permanent Resident of the US).
• Must be able to obtain and maintain the required Agency Clearance.

Preferred Qualifications:

• Agile certification.
• Experience with Azure Dev Ops environment