DevSecOps Engineer

Description

Work model: 1 day from home, 4 days from the office

Akeyless Security delivers a cloud-native SaaS platform that integrates Vaultless Secrets Management with Certificate Lifecycle Management, Next Gen Privileged Access Management (Secure Remote Access), and Encryption Key Management to manage the lifecycle of all machine identities and secrets across all environments. 

Trusted by Fortune 100 companies and industry leaders, Akeyless is redefining identity security for the modern enterprise, delivering the world’s first unified Secrets & Machine Identity platform designed to prevent the #1 cause of breaches - compromised identities and secrets. Backed by the world’s leading cybersecurity investors and global financial institutions including JVP, Team8, NGP Capital, and Deutsche Bank. 

We are looking for a talented & experienced DevSecOps Engineer, to be our first DevSecOps on our DevOps team! To work closely with our Application Security Engineer.

Responsibilities:

• Integrate security practices across the DevOps lifecycle
• Implement and manage security tools within CI/CD pipelines
• Automate security testing and compliance validation (e.g., SAST, SCA, DAST)
• Integrate security practices into CI/CD pipelines, ensuring automated security checks and compliance validation.
• Collaborate with development and operations teams to embed security measures throughout the software development lifecycle.
• Monitor system performance, conduct vulnerability assessments, and respond to security incidents promptly
• Collaborate with engineering teams to ensure secure coding and deployment standards
• Ensure security in Infrastructure as Code (IaC) and Kubernetes environments
• Collaborate with Dev and Ops teams to promote secure coding standards

Requirements

• 3+ years of experience in software development, security roles, or DevSecOps roles
• Proficiency in Python, Bash, or Go
• Hands-on experience with CI/CD tools: GitHub Actions, GitLab CI, etc.
• Experienced with at least one of the cloud platforms (AWS, Azure, GCP) and their security models
• Strong grasp of security protocols, cryptography, and authentication mechanisms
• Experienced with containerization technologies (e.g., Docker, Kubernetes) and container security practices.
• Effective collaboration and communication skills in fast-paced environments