DevSecOps Engineer III

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Avnet

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1921

🤝 B2B

🔧 Hardware

☁️ SaaS

B2B • Hardware • SaaS

Avnet is a global technology solutions company that specializes in the distribution and sale of electronic components, as well as providing integrated solutions and services. Avnet supports customers at every stage of the product lifecycle, from ideation and design to assembly, production, and end-of-life services. With a strong presence in the electronics sector, Avnet offers expertise in supply chain and logistics to help businesses innovate and bring their products to market efficiently.

📋 Description

• Design, implement, and centrally manage advanced security tooling (SAST, DAST, SCA, Secrets Management) directly within high-volume GitHub Actions and GitLab CI/CD pipelines. • Engineer and enforce security controls for our Azure-native services with a strong emphasis on Managed Identities, Azure Policy, Defender for Cloud, and securing the networking perimeter. • Lead threat modeling sessions and security design reviews for net-new, large-scale applications. • Drive the end-to-end vulnerability lifecycle, from discovery to defining clear, actionable security-focused remediation guidance for development teams. • Embed security checks and best practices into our Infrastructure-as-Code workflows, primarily using Terraform or Bicep. • Define and implement robust access controls and key management strategies utilizing Azure Key Vault and cloud-native identity solutions. • Other duties as assigned.

🎯 Requirements

• Typically, 5+ years with bachelor's or equivalent. • Hands-on experience securing production workloads in the Microsoft Azure ecosystem. • Deep familiarity with key services like AKS, Azure Functions, App Services, and Azure Firewall/WAF. • Demonstrated expertise automating security controls (scanning, gating, posture checks) within GitHub Actions and/or GitLab CI/CD. • Strong, actionable knowledge of the OWASP Top 10/API Security and aligning practices to standards like NIST 800-53. • Proficiency in Python, PowerShell, or Bash for creating security automation, custom checks, and tool integration. • Working experience with modern enterprise security tools (e.g., Snyk, Checkmarx, Prisma Cloud, GitHub Advanced Security, or ASPM platforms). • Practical experience with container runtime security and posture management (e.g., Defender for Containers, Falco).

🏖️ Benefits

• N/A