Staff Development Security Operations Engineer
Royal Lane Office, United States
Vistra
Vistra is a premier Texas-based energy company focused on the competitive energy and power generation markets.If you have what it takes to become part of the Vistra family and would like to start a promising career with a global leader, take a look at the exciting employment opportunities that are currently available and apply online.
Job Summary
As a member of the Vistra Cyber Security Team, the DevSecOps Engineer will work with agile teams to ensure security is considered throughout development through the implementation of automated guardrails and security test. They will assist in design and drive development of security testing and validation into automated tools and pipelines. They will serve as the technical liaison between the Enterprise Architect teams and the Engineering teams. Individuals within this role will specialize in the security disciplines related to automation of security controls, and ideally would have experience or expertise in DevOps.Job Description
Key Accountabilities
Provides technical support to integrate security and compliance requirements into all enterprise technology systems and projects as part of the SDLC process by working closely with various other company architects and application teams.
Creates and maintains documentation related to security processes, procedures and infrastructure.
Assesses current applications and architecture to determine methods for automating security testing and control validation.
Executes plans for implementing management directives in most secure manners with automation.
Provides security guidance and requirements to various technology teams on methods for driving security into every aspect of the established SDLC.
Works closely with cross-functional teams as a subject matter expert for security standards and advises/contributes to development as needed.
Education, Experience, & Skill Requirements
BS or BA degree in business or information systems related fields, with an emphasis in information technology or cyber security
3 - 7 years of dedicated information security experience OR 5 - 7 years of information technology administration experience
Experience designing/implementing security controls in AWS and/or Azure
Experience with automating processes and/or security controls
Familiarity with DevOps, DevSecOps, and Agile SDLC methodologies
Proven knowledge of security concepts (CISSP, CISA, CISM, GPEN, GWAPT, GCIH, other GIAC certifications, OSCP, CEH, PCNSE, etc.) .
Experience operating in a DevOps team and solving security related objectives through automation.
Key Metrics
Enhances security team accomplishments and competence by planning delivery of solutions, answering technical and procedural questions for less experienced team members, teaching improved processes, mentoring team members
Plans security systems by evaluating network and security technologies, developing network requirements for networks and related security and network devices, implements public key infrastructure configurations (PKIs), including use of certification authorities (CAs) and digital signatures
Adheres to industry guidelines, best practices, and approved standards
Prepares system security reports by collecting, analyzing, and summarizing data and trends.
Automates everyday and/or repeatable tasks, including security control enforcement
Enhances department and organization reputation by accepting ownership for accomplishing new and different requests; exploring opportunities to add value to job accomplishments.
#LI-Hybrid
#LI-ND1
Job Family
Information TechnologyCompany
Vistra Corporate Services CompanyLocations
Irving, TexasTexasWe are a company of people committed to: Exceeding Customer Expectations, Great People, Teamwork, Competitive Spirit and Effective Communication. If this describes you, then apply today!
If you currently work for Vistra or its subsidiaries, please apply via the internal career site.
It is the policy of the Company to comply with all employment laws and to afford equal employment opportunity to individuals in all aspects of employment, including in selection for job opportunities, without regard to race, color, religion, sex, sexual orientation, gender identity, pregnancy, national origin, age, disability, genetic information, military service, protected veteran status, or any other consideration protected by federal, state or local laws.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Agile Automation AWS Azure CEH CISA CISM CISSP Compliance DevOps DevSecOps GCIH GIAC GPEN GWAPT OSCP SDLC Teaching
Perks/benefits: Career development
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.