DevSecOps Engineer

Vaga não está no LinkedIn

🕒 4 dias atrás

🇺🇸 Estados Unidos – Remoto (EUA)

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

⛑ DevOps & Engenheiro de Confiabilidade do Site (SRE)

👻 Score fantasma 10%

O que significa: quão provável esta vaga está aberta sem contratação ativa.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

Mastercam

SiteLinkedInTodas as Vagas

201 - 500 funcionários

Fundada em 1983

🚘 Automotivo

💼 Consultoria

📦 Logística

Automotive • Consulting • Logistics

A Mastercam é uma fornecedora líder de soluções de software CAD/CAM projetadas para enfrentar os desafios de manufatura enfrentados por uma variedade de indústrias. Conhecida por suas ferramentas inovadoras e interface intuitiva, a Mastercam atende usuários industriais e educacionais, ajudando a otimizar os processos de produção e aprimorar a precisão da usinagem. Com sua gama diversificada de produtos e suporte abrangente, a Mastercam atende vários setores, incluindo aeroespacial, automotivo e energia, tornando-se uma aliada crucial na manufatura moderna.

Descrição

• Secure and govern Mastercam's cloud-native application platforms, AI-enabled solutions, and supporting infrastructure • Integrate security throughout the software development lifecycle, including CI/CD pipelines, Kubernetes environments, identity and access management systems, cloud services, and AI workloads • Design, implement, and maintain security controls protecting applications, infrastructure, data, and AI services • Establish security standards, improve risk management practices, and promote secure-by-design principles • Secure Kubernetes-based platforms and containerized workloads • Implement Kubernetes security controls including RBAC, Network Policies, Pod Security Standards, and namespace segmentation • Perform security reviews of platform architecture and application deployments • Develop infrastructure hardening standards and security baselines • Integrate security controls into CI/CD pipelines and implement automated vulnerability scanning, code analysis, and compliance checks • Establish secure software supply chain processes and maintain security guardrails within GitOps workflows • Partner with development teams to remediate vulnerabilities and improve secure coding practices • Secure authentication and authorization systems and implement least-privilege access controls • Support identity federation, SSO, OAuth2, OpenID Connect, and MFA • Review systems for access governance and privileged access risks • Manage secrets, certificates, encryption keys, and service credentials, including automated rotation and certificate lifecycle management • Secure API gateways and service-to-service communications against OWASP API Security standards • Implement API authentication, authorization, rate limiting, API threat protection, and Zero Trust networking controls • Create security dashboards, alerts, metrics, and monitoring capabilities • Collaborate during security investigations and incident response activities • Analyze platform telemetry and audit logs to identify threats and control gaps • Support security reviews for AI and machine learning workloads • Help protect against prompt injection, sensitive data exposure, and model misuse • Participate in AI governance and risk assessment activities • Evaluate risks associated with LLMs, vector databases, and AI platforms

🎯 Requisitos

• Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field required; equivalent combinations of education, military service, and relevant professional experience will also be considered • 4–5 years of experience in Security Engineering, DevSecOps, Cloud Security, DevOps, or Platform Engineering • 1+ year of hands-on experience supporting Kubernetes or containerized application environments • Experience securing cloud-native applications and services • Experience implementing vulnerability management and application security programs • Experience working with software development teams and CI/CD pipelines • Experience supporting AWS, Azure, or Google Cloud environments • Knowledge of Kubernetes architecture, Pods, Deployments, Services, Ingresses, RBAC, Network Policies, container security, workload isolation, and cluster security fundamentals • Experience with Docker, container image security, image scanning, vulnerability remediation, and secure image lifecycle management • Experience with CI/CD pipelines, source code management platforms, Git workflows, automation, and scripting • Understanding of SAST, DAST, dependency scanning, secret scanning, and Infrastructure-as-Code security • Knowledge of OAuth2, OpenID Connect, SAML, MFA, and Role-Based Access Control • Experience with vulnerability management, threat detection, security monitoring, incident response support, and risk assessments • Ability to automate security processes using Python, Bash, and PowerShell • Preferred certifications include Security+, CKA, CKS, AWS Certified Security Specialty, CISSP, CCSP, or GIAC Certifications