Software Engineer - E2
Description
Standard Job Description
We are seeking a skilled and collaborative DevSecOps Engineer to bridge the gap between Software Development, Cybersecurity, and IT Operations. In this role, you will not act as the "security police," but rather as a builder who embeds proactive security guardrails into our automated software delivery pipelines. Your primary goal is to shift security left—ensuring that code security, compliance checks, and infrastructure hardening are continuous, automated, and frictionless from code commit to production deployment. Design, develop, and maintain controls within our shared Continuous Integration/Continuous Delivery (CI/CD) pipelines. Integrate automated test tools, including static code analysis tools, dynamic code analysis tools and other analysis tools.
Basic Qualifications
- Foundational background in Information Technology (IT) or software development, hands-on experience with cloud and container tools, and basic security knowledge.
- Bachelor's degree in computer science, computer engineering, Information Technology, Cybersecurity engineering.
- 1 to 3 years of experience supporting DevOps, DevSecOps, Cloud Engineering.
- Basic proficiency in scripting languages like Python, Bash, PowerShell or Node.js for automation.
- Familiarity with Docker for containerization and basic Kubernetes or OpenShift administration concepts.
- Experience with Git/Gitlab and building and maintaining CI/CD pipelines.
Desired Skills
- Balanced blend of foundational software development, cloud infrastructure automation, and practical security integration.
- Understanding of Static Application Security Testing (SAST) tools and techniques.
- Understanding of Dynamic Application Security Testing (DAST) tools and techniques.
- Hands on familiarity with Git/Gitlab, and proficiency with Git workflows.
- Containerization - knowing how to build, secure, and run application images using Docker.
- Scripting fluency with solid command of Python, Bash, PowerShell for writing automation scripts.
- Foundational knowledge of Cloud architecture with at least knowledge / experience with either Amazon Web Services (AWS), Microsoft Azure or Google Cloud Platform.