Remote Security Operations Engineer Job in United States Cars Commerce

Who you are

• Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience)
• 3+ years experience in SecOps cloud roles
• Proven experience in DevOps or software development roles, with a focus on security
• Understanding of DevOps principles and methodologies
• Hands-on experience with AWS cloud platforms and containerization technologies (e.g., Docker, Kubernetes)
• Proficiency in scripting languages such as Python, PowerShell, or Bash
• Experience with security tools such as vulnerability scanners, intrusion detection systems (IDS), and security information and event management (SIEM) solutions
• Familiarity with compliance standards such as PCI DSS, HIPAA, and GDPR
• Excellent communication and collaboration skills, with the ability to work effectively in a team environment

Desirables

• Security certifications such as CISSP, CEH, or AWS Certified Security Specialty
• Experience with infrastructure as code tools (e.g., Terraform, Ansible, Chef)
• Knowledge of secure software development frameworks (e.g., OWASP)
• Experience with DevSecOps tools and practices (e.g., DevSecOps automation, shift-left security)

What the job involves

• Implement and manage security tools and technologies within the CI/CD pipeline.
• Conduct security assessments, code reviews, and penetration testing to identify and address vulnerabilities.
• Monitor and analyze security events and incidents, responding promptly to mitigate threats.
• Provide guidance and support to development and operations teams on secure coding practices and infrastructure configurations.
• Upon detection of a security incident, support a thorough investigation to assess the scope and impact of the incident.
• Collaborate with development, operations, and security teams to gather relevant information and context for incident analysis.
• Implement mitigation strategies to contain and remediate the security incident promptly.
• Coordinate with relevant stakeholders to deploy patches, updates, or configuration changes to address vulnerabilities and prevent further exploitation.