Security DevSecOps Specialist

Job Title: Security DevSecOps Specialist
Location: Remote
Duration/Term: Long Term Contract

Job Description

We are seeking a skilled and motivated DevSecOps Engineer to join our team and contribute to the security, administration, and efficiency of our infrastructure. The ideal candidate will possess expertise in Linux system internals, container security, DevSecOps tools, and automation scripting while ensuring compliance with regulatory standards such as FedRAMP or BSI IT-Grundschutz. With a focus on maintaining secure, scalable environments, this role will require strong communication skills to translate technical concepts effectively across stakeholders.

Key Responsibilities

1. Manage and maintain Linux systems with a focus on internals, access control, package/service management, and log analysis.
2. Ensure compliance with standards like FedRAMP, BSI IT-Grundschutz, or similar regulatory frameworks.
3. Utilize DevSecOps tools and practices, including Infrastructure as Code (Terraform), configuration management (Ansible), and CI/CD pipelines (GitLab CI, Pipelines), to streamline deployments and operations.
4. Develop and maintain scripts using Python, Bash, or other programming languages for automation.
5. Ensure container security and deploy applications using orchestration platforms such as Docker and Kubernetes.
6. Produce clear and detailed documentation while effectively communicating technical concepts across diverse stakeholders.
7. Support security audits by implementing remediation plans and maintaining alignment with security benchmarks like CIS Controls or DISA STIGs.
8. Proactively monitor and secure infrastructure to enhance operational resilience and security.

Qualifications

Must-Have:

• 4+ years of experience in Linux system administration, security engineering, or DevSecOps.
• Proficiency in Linux system internals, including access control, package/service management, and log analysis.
• Experience with compliance standards such as FedRAMP or BSI IT-Grundschutz.
• Expertise in DevSecOps tools: Infrastructure-as-Code (Terraform), configuration management (Ansible), and CI/CD tools (GitLab CI, Pipelines).
• Automation scripting experience with Python, Bash, or similar languages.
• Strong understanding of container security and orchestration platforms like Docker and Kubernetes.
• Proven ability to create clear documentation and effectively communicate technical concepts to stakeholders.

Nice-to-Have:

• Experience supporting security audits and implementing remediation measures.
• Familiarity with security benchmarks such as CIS Controls or DISA STIGs.
• Relevant security certifications, including Linux+, GSEC, OSCP, or CISSP.

Key Skills

Linux system internals, security engineering, Terraform, Ansible, CI/CD pipelines (GitLab CI, Pipelines), container security (Docker, Kubernetes), Python, Bash, FedRAMP compliance, BSI IT-Grundschutz, security benchmarks (CIS Controls, DISA STIGs), documentation, communication skills, security audits.