RRemoteville
Cars Commerce logoCars Commerce

Security Operations Engineer

Skills
Computer ScienceApplication SecurityCode ReviewCybersecurity ToolsInformation SecurityIntrusion DetectionMitigation Strategies
Role

What the job involves

The main requirements, responsibilities and hiring steps.

Requirements

  • Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience)
  • 3+ years experience in SecOps cloud roles
  • Proven experience in DevOps or software development roles, with a focus on security
  • Understanding of DevOps principles and methodologies
  • Hands-on experience with AWS cloud platforms and containerization technologies (e.g., Docker, Kubernetes)
  • Proficiency in scripting languages such as Python, PowerShell, or Bash
  • Experience with security tools such as vulnerability scanners, intrusion detection systems (IDS), and security information and event management (SIEM) solutions
  • Familiarity with compliance standards such as PCI DSS, HIPAA, and GDPR
  • Excellent communication and collaboration skills, with the ability to work effectively in a team environment

Nice to have

  • Security certifications such as CISSP, CEH, or AWS Certified Security Specialty
  • Experience with infrastructure as code tools (e.g., Terraform, Ansible, Chef)
  • Knowledge of secure software development frameworks (e.g., OWASP)
  • Experience with DevSecOps tools and practices (e.g., DevSecOps automation, shift-left security)

Day to day

  • Implement and manage security tools and technologies within the CI/CD pipeline.
  • Conduct security assessments, code reviews, and penetration testing to identify and address vulnerabilities.
  • Monitor and analyze security events and incidents, responding promptly to mitigate threats.
  • Provide guidance and support to development and operations teams on secure coding practices and infrastructure configurations.
  • Upon detection of a security incident, support a thorough investigation to assess the scope and impact of the incident.
  • Collaborate with development, operations, and security teams to gather relevant information and context for incident analysis.
  • Implement mitigation strategies to contain and remediate the security incident promptly.
  • Coordinate with relevant stakeholders to deploy patches, updates, or configuration changes to address vulnerabilities and prevent further exploitation.