DevSecOps Engineer

🕒 February 11

Apply Now

Find Similar Remote Jobs

Receive Emails For Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

The Weather Company

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

The Weather Company helps people and businesses around the world make more informed decisions and take action in the face of weather. With its deep industry expertise and highly accurate, high-volume weather data combined with advanced technology and AI, The Weather Company provides insights and solutions that harness the power of weather in a scalable, privacy-forward way. The world’s most accurate forecaster, the company serves hundreds of enterprise customers across media, advertising, aviation and more, and is trusted by hundreds of millions of monthly active users via digital properties from The Weather Channel (weather.com) and Weather Underground (wunderground.com).

📋 Description

• Set up and automate regular system patching • Set up and automate static and dynamic code scanning • Set up and automate vulnerability scanning • Automate the creation of tickets and the production of evidence from scanning tasks • Automate change management processes • Build security and compliance dashboards and reports • Perform security reviews on build environments and ensure all systems are maintained with the latest patches, and that security best practices are being followed • Participate in agile/scrum processes to help ensure that security deliverables are triaged, prioritized, and slipstreamed into product delivery processes • Collaborate and coordinate with 3rd party security consultants. • Manage audit processes and triage results with the team.

🎯 Requirements

• 5+ years of professional experience as a DevSecOps engineer • Deep understanding of build automation processes and tools (GitHub Actions, Vercel, Jenkins, TravisCI) • Expertise with container technologies (Docker, Kubernetes, Helm) • Experience with different compliance standards (SOC2, CMMC, NIST, ISO) • Familiarity with the Department of Defense (DoD) Impact Level 6 • Ability to script/code in at least two of the following languages: bash, perl, python, ruby, groovy, JavaScript, PHP • Solid understanding and experience with APIs (REST, XML, JSON) • Extensive experience with at least one cloud provider (AWS, Azure) • Experience with security tooling (Checkmarx, OWASP Zap, Skyk, Dependabot) • Familiarity with issue tracking systems, especially JIRA • Good communication and organizational skills • Self-starter, open to learning new skills and accepting new challenges.

🏖️ Benefits

• SkillBridge Eligibility: Active-duty service member within 180 days of separation. • Able to obtain command approval to participate. • Meets basic qualifications for the role.